Corporate IT Engineer

Maybern is scaling to over 100 employees and is hiring our first dedicated IT and Security operator. We're looking for someone with a strong sense of ownership and agency who wants to build and shape this function, not just operate within one. The ideal candidate is as comfortable helping a teammate with Google Meet/Zoom connectivity as they are owning the SOC 2 evidence collection process and responding to security questionnaires. This role is at the intersection of IT operations and security compliance.

Responsibilities

Be the reliable face of IT for every Maybern employee and follow through to resolution; Own endpoint management end-to-end: MDM administration, device provisioning, inventory, and asset lifecycle; Own and maintain conference room and Google Meet/Zoom Rooms setup; Administer identity providers (Okta or equivalent) and enforce access policies; Ensure every new hire is set up correctly and departures are offboarded in partnership with People Ops; Set IT foundations for scaling; Own continuous SOC 2 evidence collection and control monitoring; Conduct and document quarterly access reviews and coordinate audit prep; Administer endpoint security tooling (CrowdStrike or equivalent) and monitor/triage incidents; Coordinate annual security training completion and track attestations; Maintain and improve security response library; Respond to vendor security questionnaires and own security sections of DDQs; Conduct quarterly access audits across SaaS stack, manage license governance and shadow IT; Own vendor security review process; Identify opportunities to rationalize stack and reduce tooling sprawl

Requirements

6+ years of IT and/or security operations experience, ideally at a scaling SaaS or fintech products; Hands-on experience with SOC 2 Type II: collected evidence, managed a control framework, coordinated with auditors, or demonstrated equivalent compliance program ownership; Working knowledge of MDM tools (Kandji or equivalent), identity providers (Okta or equivalent), and continuous compliance platforms (Secureframe or equivalent); Extensive experience in a primarily Mac environment; Comfortable coordinating compliance requirements with engineering team; Self-directed, organized, and calm under pressure; Systems-minded; Service-oriented; Reliable and thorough; High agency; Enthusiasm and high standards; Collaborative

Nice to have

Been the first or one of the first internal IT hires at an earlier stage or smaller company; Experience responding to vendor security questionnaires and customer trust reviews independently; Direct experience with Crowdstrike, Cloudflare, or DLP tooling

Benefits

Competitive salary + equity package; Comprehensive healthcare benefits with 100% of medical, dental, and vision premiums covered; HSA & FSA plans; Paid parental leave; Flexible schedule; Flexible PTO / sick leave; WFH as needed; 401k