Head of IT
Role Summary
You will be the owner for Osmo’s workplace IT and security operations. You’ll own the IT roadmap, vendor relationships (SaaS, MDM, identity, security), incident response, asset lifecycle, and a high-quality employee support experience. You will be expected to be both strategic (roadmaps, budgeting, compliance) and tactical (hands-on implementation, troubleshooting), and to communicate clearly with the executive team.
Core Responsibilities
Operational ownership: Own day-to-day IT operations: identity and access management (SSO/MFA), device lifecycle and MDM, endpoint security, network, backups, and remote-work tooling.
Maintain and improve an employee-facing IT service model (ticketing, SLAs, knowledge base, onboarding/offboarding).
Security & compliance: Implement and maintain baseline security controls (MFA, patching, least privilege, phishing defenses, logging/monitoring). Lead incident response, forensics and remediation; create runbooks and playbooks.
Prepare the company for audits or investor / partner security reviews; implement risk reduction projects. Serve as the primary guardian of the organization's digital assets, responsible for developing, implementing, and maintaining a comprehensive cybersecurity strategy.
Vendor & contract management: Own relationships and contracts with critical vendors (Okta/SSO, MDM, endpoint/EDR, cloud providers, SaaS procurement), negotiate pricing, drive cost optimization and vendor SLAs. Manage outsourced IT partners and contractors. Ensure high quality of deliverables and transparency.
Infrastructure & cloud: Coordinate with engineering on cloud identity, network segmentation and secure access patterns; partner effectively with engineering/devops teams where responsibilities overlap. Own on-prem or hybrid infrastructure if present (or cloud spend & lifecycle if fully cloud).
Process, documentation & governance: Build and enforce IT policies (acceptable use, device policy, BYOD, password/credential standards). Deliver clear, up-to-date documentation: asset inventory, runbooks, onboarding/offboarding checklists, project plans. Establish measurable KPIs: ticket response/resolution times, patch compliance, uptime SLAs, time to onboard, incident MTTR.
People & communication: Communicate clearly to executives and non-technical staff; produce concise status reports, risk summaries, and roadmap updates.
Required Qualifications
7+ years in IT roles with progressive responsibility; 3+ years leading IT teams or owning IT for a scaling company.
Proven track record at Series-B or similarly fast-growing startups (or vendor side supporting startups).
Hands-on experience with SSO/IdP (Okta or similar), MDM (Jamf, Intune, Kandji), endpoint security/EDR, device provisioning and lifecycle.
Familiarity with cloud provider platforms (AWS/GCP/Azure), networking fundamentals and secure access patterns.
Strong vendor management and contract negotiation experience.
Demonstrated ability to deliver consistent, high-quality work and documentation under tight timelines.
Excellent written and verbal communication — able to explain technical risk and project status to executives.
Experience with incident response, security controls and risk reduction.
Comfortable being both strategic and deeply technical; willing to do hands-on work when needed.
Preferred / Nice-to-have
Prior experience building IT processes and playbooks at Series B startups.
Experience managing outsourced/contract IT partners and driving improved work product from vendors.
Familiar with compliance frameworks (SOC 2, ISO 27001) or audit readiness.
Located in New Jersey or willing to be onsite periodically for team meetings and hardware needs.
Familiarity with Notion/Atlassian service management or modern ticketing & knowledge-base tools.