Director, IT

About the role

The Talent Director of IT is responsible for building Stepful's IT and security function from the ground up. This is a hands-on role to start, operating as an individual contributor while setting the strategy and building a team as the company scales.

Responsibilities

• Own Stepful's security program end to end, leading our SOC 2 effort from readiness assessment through audit and ongoing compliance
• Define and enforce security policies, identity and access management, and least-privilege controls across the organization (SSO, MFA, access reviews)
• Support our B2B healthcare partnerships by owning security questionnaires, vendor assessments, and customer audit requests
• Own the full equipment lifecycle — procurement, MDM deployment, inventory, and seamless onboarding/offboarding for every employee
• Manage our SaaS application stack, including provisioning, access governance, vendor security reviews, and spend optimization
• Build scalable IT support processes and serve as the escalation point for day-to-day IT needs, rolling up your sleeves while the function is small
• Partner with Engineering on incident response, endpoint security, and infrastructure hardening

Requirements

• 8+ years of IT experience, including experience leading IT or security functions at a high-growth startup
• Hands-on experience driving a SOC 2 certification (Type I and II) from readiness through audit
• Deep expertise with the modern IT stack: MDM (e.g., Kandji, Jamf), identity providers (e.g., Okta, Google Workspace), and endpoint security tooling
• Proven ability to operate as a strategic leader and a hands-on individual contributor at the same time
• Strong vendor management skills across hardware, software, and audit partners
• Exceptional communication skills with the ability to make security and compliance accessible to non-technical teams
• A builder's mindset — you're energized by creating processes and systems from scratch, not inheriting them

Qualifications

• Experience with HIPAA or healthcare data compliance
• Experience building an IT function from zero at a scaling company
• Experience in EdTech, healthcare, or another mission-driven industry

Skills

• Security and compliance expertise
• IT operations management
• Vendor management
• Communication and accessibility
• Process and system creation

Benefits and Compensation

• Meaningful equity stake
• Subsidized medical, dental, and vision insurance plan options
• 401(k) plan
• FSA, HSA, and commuter benefits
• Open vacation policy, including 15 days PTO annually
• 15 work-from-anywhere days
• Public holidays observed for 2026

Pay

The target base salary range for this opportunity is $200,000 - $250,000, and is part of a competitive total rewards package including equity and benefits.

Schedule

This is a hybrid opportunity based out of our NYC office, requiring three days/week (Tuesday, Wednesday, Thursday).