IT & Security Manager

IT & Security Manager San Francisco, CA · In Person · Full-Time

About Vizcom:

At Vizcom, we’re reimagining how physical products are designed by fusing AI with human creativity to help designers move from sketch to reality at lightning speed. We’re building AI-powered sketching and collaboration tools that make designing feel as natural as drawing and as powerful as imagining something into existence. We’re a small, fast-moving team that values initiative, experimentation, collaboration, and an eye for beauty.

The Role:

As the IT & Security Manager, you’ll own Vizcom’s day-to-day IT function and the operational execution of our security program, helping build the systems, processes, and infrastructure that support our growing team.

You’ll be the primary point of contact for employee IT needs and manage everything from identity and access management to SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.

This is a hands-on role for someone who enjoys solving problems, creating order, and building scalable processes. You’ll report to the Head of People and work closely with our Senior Manager, Compliance & Trust, who will provide functional direction on security and compliance priorities. You’ll also partner with Engineering and teams across Vizcom to make sure employees have the access, tools, and support they need while keeping our systems secure and well managed.

We’re not looking for someone to build a large IT organization or introduce unnecessary enterprise complexity. We’re looking for a strong operator who can own the work, improve how we do it, and build an IT and security operations foundation that can scale with us.

How You’ll Do It:

• Serve as the primary point of contact and owner for day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity

• Own Tier 1 and Tier 2 support from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals

• Establish a simple, effective process for employees to request IT support and create clear expectations around response and resolution times

• Escalate issues to vendors, Engineering, or other technical owners when appropriate, providing the troubleshooting, reproduction steps, and logs needed to resolve them efficiently

• Own employee account creation, access changes, and deactivation across company systems

• Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews

• Administer core employee systems and SaaS applications, including Google Workspace, Slack, password management, and other company-wide tools

• Apply least-privilege principles to provisioning and access management and regularly identify stale accounts, unnecessary permissions, and standing administrative access

• Own device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance

• Manage the ongoing lifecycle of company hardware, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal

• Partner with People on employee onboarding and offboarding, owning the technical and security components of the employee lifecycle, including accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery

• Work closely with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls

• Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate confirmed or potentially significant incidents to the appropriate security owner

• Tune security alerts and suppression rules where appropriate to reduce recurring noise and improve the effectiveness of monitoring

• Serve as a first responder for endpoint security incidents, including isolating devices, collecting relevant artifacts, preserving evidence, and documenting actions taken

• Participate in incident response exercises and post-incident reviews and help turn findings into concrete operational improvements

• Support SOC 2, ISO 27001, cyber insurance, customer security reviews, and other compliance initiatives by producing and maintaining technical evidence such as asset inventories, endpoint coverage, patching records, access reviews, and device compliance records

• Maintain accurate documentation of systems, administrative ownership, configurations, vendors, security controls, processes, and recovery procedures

• Ensure critical systems have appropriate administrative redundancy and are not dependent on a single employee for access or institutional knowledge

• Manage IT and security vendors, software licenses, warranties, and related operational expenses

• Regularly review SaaS usage and licenses to identify unused accounts, unnecessary tools, unsanctioned software, and opportunities to consolidate or reduce spend

• Package and deploy applications and identify opportunities to automate repetitive IT processes or create employee self-service where appropriate

• Develop and maintain useful documentation and self-service resources for recurring employee IT issues

• Assess our current IT and endpoint security environment and develop practical recommendations for improving our systems and processes as the company continues to scale

• Build solutions that meet our needs today while avoiding unnecessary complexity or enterprise-level infrastructure that does not make sense for our stage

What You’ll Bring:

• 3–5 years of experience in IT, IT Operations, Systems Administration, Security Operations, or a similar hands-on technical role, including meaningful hands-on responsibility for security

• Exp