Information Security & Compliance Engineer

Job Description

Job Description

We're looking for a security generalist who is equally comfortable writing a policy set, hardening

an Okta Org, or triaging a SentinelOne alert. Most of our clients are VC firms and VC-backed

startups. You'll own client security programs end-to-end, from audit readiness and vendor risk

through endpoint and cloud security to ongoing security operations.

What You'll Do:

Compliance Program Management

• Guide clients through the full audit lifecycle for SOC 2 and ISO 27001: readiness, gap analysis, remediation, evidence, and auditor liaison.
• Run Hi! Tech's own compliance program in Vanta, with remediation tracked in Jira.
• Build compliance roadmaps aligned to client goals, funding milestones, and IPO readiness.
• Build and maintain policy suites (Acceptable Use, AI Tools, Incident Response, BCDR, Access Control, WISPs, and more).
• Keep policies current with NIST, SEC Regulation S-P, GDPR, CCPA, and client-specific obligations.

Trust Centers & Vendor Risk Management

• Stand up and maintain client Trust Centers.
• Complete security questionnaires (CAIQ, SIG, RFPs) etc.
• Review new vendors and AI tools before clients adopt them, and recommend approval or decline.
• Manage vendor inventories in Vanta, including risk tiering and attestation follow-ups.
• Improve our TPRM process and questionnaires over time.

Endpoint, Cloud & Infrastructure Security

• Deploy and tune SentinelOne and MDM (Mosyle, Jamf, Intune) across macOS and Windows fleets.
• Harden identity and access with Okta, MFA, lifecycle management, and 1Password.
• Secure Google Workspace, Microsoft 365, and all other cloud and SaaS platforms.
• Partner with our network and systems engineers on security controls.

Security Operations & Governance

• Triage and respond to alerts across EDR, identity, email, and cloud tools.
• Act as first responder for security incidents and lead the lessons-learned review afterward.
• Run vulnerability management, including pen test remediation tracking.
• Maintain log and SIEM sources for detection and audit needs.
• Run recurring access reviews and configuration audits.
• Run security awareness training and phishing campaigns in KnowBe4 and Adaptive, including new hire and corrective training.
• Report on security posture, risks, and KPIs in regular client reviews.

Client & Internal Delivery

• Explain technical risk in plain language to founders, executives, and non-technical staff.
• Scope work, manage delivery, and own timelines.
• Track work in Jira and time in Harvest.
• Build reusable templates, SOPs, and playbooks, and teach them to the team.

What You Bring:

Who Thrives Here

• You take initiative and work well with limited supervision.
• When you hit an unfamiliar blocker, you dig in until it's solved.
• You're collaborative and bring real empathy to end users.
• You handle sensitive client data with discretion.

Required

• 3–5+ years in information security or IT operations, with at least 2 years of hands-on compliance work.
• Hands-on experience with Vanta, Drata, or Secureframe through a full audit cycle.
• Hands-on administration of EDR and MDM.
• Experience with Okta or Entra ID.
• Working knowledge of Google Workspace or Microsoft 365 security, plus one major cloud platform.
• Experience with vulnerability management and incident response.
• Strong understanding of SOC 2, NIST CSF, and ISO 27001.
• You can write an audit-ready policy and explain it to a non-technical audience.

Nice to Have

• Certifications such as Security+, CISSP, CISA, or ISO 27001 Lead Implementer.
• MSP or consulting experience.
• Experience with SEC Regulation S-P, SOX ITGCs, or IPO readiness.
• Experience assessing AI tools.
• Scripting in Python, PowerShell, or Bash.

What We Offer:

Benefits

• Generous paid time off
• Medical, dental, and vision insurance
• Life and long-term disability insurances
• Commuter and cell phone stipend
• 401(k) with company match [4%]
• Hybrid work schedule

Hi! Tech is a team of friendly technologists providing tailored solutions for venture capital (VC) and VC-backed technology startups. We focus on the tech, so our clients can focus on success.

We pride ourselves on being a unique organization in today’s technology landscape. Born in 2013 out of a couture home IT support company in Brooklyn, Hi! Tech strategically pivoted into the business-to-business (B2B) client world and grew into a firm capable of taking on large-scale projects. All client experiences over the past 10 years have contributed to our evolution and helped us to become who we are today - a team of consultants who provide boutique, premium IT and technology support to our clients. Our organic growth has come from a strong client base and their referrals, the best testament to the work we do every day.

So who are our clients? They exist in all ends of tech-forward industries, from television and digital media production to health and beauty to e-commerce and retail. We meet our clients where they are, and design and execute fully customizable IT solutions based on the growing needs of their business!

Ways of working within our internal teams are collaborative and conversational, and we prioritize open communication and knowledge sharing. When your people come from as wide-ranging professional backgrounds as ours do, you always have something to learn from one another! Some questions we ask ourselves constantly: How can we do better? How can we make our work excellent? Our team members help push us to get there, and we grow alongside them.

We believe in and are proud of taking care of our people. We offer competitive salaries and a complete benefits package, including generous paid time off, a 401(k) with a company match of up to 4%, medical, dental, and vision insurance with company contributions, life, and long-term disability insurance, commuter and cell phone reimbursements, IncentFit and CitiBike memberships, all paid for by the company.

At Hi! Tech, we are committed to fostering an inclusive and accessible workplace. If you require reasonable accommodations during the application or interview process due to a disability, please contact us. We are excited to work with you to ensure a positive and equitable experience.

Equal Opportunity:
Hi! Tech is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected characteristic. Qualified applicants with arrest or conviction records will be considered in accordance with the California Fair Chance Act and applicable local ordinances.

Company Description

Hi! Tech is a team of friendly technologists providing tailored solutions for venture capital (VC) and VC-backed technology startups. We focus on the tech, so our clients can focus on success.\n\nWe pride ourselves on being a unique organization in today’s technology landscape. Born in 2013 out of a couture home IT support company in Brooklyn, Hi! Tech strategically pivoted into the business-to-business (B2B) client world and grew into a firm capable of taking on large-scale projects. All client experiences over the past 10 years have contributed to our evolution and helped us to become who we are today - a team of consultants who provide boutique, premium IT and technology support to our clients. Our organic growth has come from a strong client base and their referrals, the best testament to the work we do every day.\n\nSo who are our clients? They exist in all ends of tech-forward industries, from television and digital media production to health and beauty to e-commerce and retail. We meet our clients where they are, and design and execute fully customizable IT solutions based on the growing needs of their business!\n\nWays of working within our internal teams are collaborative and conversational, and we prioritize open communication and knowledge sharing. When your people come from as wide-ranging professional backgrounds as ours do, you always have something to learn from one another! Some questions we ask ourselves constantly: How can we do better? How can we make our work excellent? Our team members help push us to get there, and we grow alongside them.\n\nWe believe in and are proud of taking care of our people. We offer competitive salaries and a complete benefits package, including generous paid time off, a 401(k) with a company match of up to 4%, medical, dental, and vision insurance with company contributions, life, and long-term disability insurance, commuter and cell phone reimbursements, IncentFit and CitiBike memberships, all paid for by the company.\n\nAt Hi! Tech, we are committed to fostering an inclusive and accessible workplace. If you require reasonable accommodations during the application or interview process due to a disability, please contact us. We are excited to work with you to ensure a positive and equitable experience.\n\nEqual Opportunity:\nHi! Tech is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other legally protected characteristic. Qualified applicants with arrest or conviction records will be considered in accordance with the California Fair Chance Act and applicable local ordinances.