Senior IT Support and Security Specialist

We need to output HTML fragment with sections: About the role? Actually the posting includes sections: About Hearth, The Opportunity, What You'll Do, What Success Looks Like, What We're Looking For (must-haves, nice-to-haves, what we're not looking for), Why This Role, Location, Benefits, More About Us (EEO etc - we should remove boilerplate), The Pay Range. We must not repeat job title as heading. Use

for section headings: e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. However we need to map content to these headings appropriately. The instruction: "use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we should use those exact headings? It says e.g., meaning examples; we can use those headings if they match content. We need to include a section only when posting has real, specific content for it. So we need to decide which sections apply. We have content about role description (What You'll Do) -> could be Responsibilities. We have qualifications (must-haves, nice-to-haves) -> Requirements/Qualifications/Skills. We have Benefits section. We have Pay range. We have Location maybe not a heading; could be part of About the role? Not required. We have About Hearth (company description) maybe About the role? Actually About the role could be a brief summary of role; but we have About Hearth (company). Could treat as About the role? Might be okay. But we should not invent filler. We need to preserve all substantive information. We must remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. So remove "More About Us Hearth embraces diversity..." etc. Also remove "Questions about our process? Contact recruiting@gethearth.com." That's application instruction? It's contact; maybe remove. Also remove "The Pay Range For This Role Is 110,000 - 135,000 USD per year(New York)" we keep as Pay section. We need to output only HTML fragment, no /, no markdown fences. Let's structure:

About the role

... summary from About Hearth and The Opportunity? Could combine.

Responsibilities

• ... list from What You'll Do

Requirements

• ... must-haves

Qualifications

Maybe nice-to-haves? Or we could combine must-haves and nice-to-haves under Requirements and Qualifications. But we need to avoid thin sections. Could have Requirements (must-haves) and Qualifications (nice-to-haves). Or Skills (nice-to-haves). Let's decide. We have Benefits section: we have list of benefits. Pay section: we have pay range. Schedule: not specified; we should not create Schedule section because no specific schedule info (though mentions on-site five days a week, hybrid 3+ days/week). That's schedule info. Could be considered schedule. The posting says "Able to be on-site at our SoHo office five days a week." and later "Hearth believes in the energy, connection, and serendipity of in-person/hybrid work culture (3+ days/week)". That's schedule info. So we can include Schedule section. Thus sections: About the role, Responsibilities, Requirements, Qualifications, Benefits, Pay, Schedule. We must not include headings with filler. Ensure each has substantive content. Now extract content. About Hearth: "Hearth is the AI growth system for America's home improvement contractors. With 15,000+ paying customers, default profitability, and backing from top-tier investors like Founders Fund and 8VC, we provide the revenue-critical software tradespeople rely on to run their businesses. We are now building our next layer of innovation: an autonomous AI employee for every contractor. By answering calls 24/7, qualifying leads, and booking jobs, this AI ensures small businesses never miss a lead again. We're on a mission to bring AI to the trades—and we need your help to build it." The Opportunity: "You'll operate as a team of one making IT work at Hearth. As our Senior IT and Security Specialist, you'll keep every employee unblocked, own how we onboard and off board, manage our MAC fleet, and keep our SOC2 program running smoothly. Our systems have the basics in place, but they weren't built to scale — this is your shot to audit what's there and build the function into something that can support our growth." We can combine these into About the role paragraph. Responsibilities (What You'll Do): - Keep the team unblocked. Be the first stop for IT issues across the company, resolving day-to-day tickets (roughly 10/day) quickly and independently. - Build the systems we're missing. Own onboarding and off-boarding end to end, documenting the process so a new hire's first day feels seamless, not scrambled. - Run SOC2 compliance. Partner with our People Operations team to keep us audit-ready in Vanta, owning the operational side of staying compliant. - Mac Fleet Management: You will be responsible for the end-to-end lifecycle of our MacBook fleet, including provisioning, deployment, MDM administration security compliance, updates, and onboarding/offboarding. - Level up how we work. Administer our Mac fleet, tighten access across tools like Dialpad and Salesforce, and find smarter ways to run IT — including automating repetitive support with AI where it makes sense. - Grow the role your way. If it's the right fit, expand into Office Manager responsibilities — reception, supplies, guest coordination — with compensation adjusted accordingly. What Success Looks Like In Your First 90 Days: - Employees are consistently unblocked — no ticket sits unresolved for long. - A documented, repeatable onboarding and off-boarding process exists where one didn't before, and it's yours. - SOC2 compliance work is moving forward smoothly and on track. These could also be responsibilities or expectations; but we can incorporate into Responsibilities or maybe separate but we only have limited headings. Could add as part of Responsibilities. Requirements (Must-haves): - Prior experience as the main IT point person (or a core IT specialist) at a company of a similar size — you've seen a lot and can operate independently without hand-holding. - Mac fleet administration experience, ideally from another startup. - Strong written communication — much of this role happens over Slack, so clear, polished writing matters. - Working knowledge of SOC2 compliance. - Able to be on-site at our SoHo office five days a week. Nice-to-haves (Qualifications/Skills): - Experience building AI-powered workflows or automations — auto-resolving routine support tickets, for example. - Familiarity with Okta or similar identity/access management tools. - Comfortable owning the SOC2 process in a tool like Vanta (deep, years-long compliance background not required — most of it is learnable). What We're Not Looking For: "We need someone who's done this before with the capability of being a department of one." This is basically a restatement; we could incorporate into Requirements but it's not additive. Could ignore as boilerplate? It's not boilerplate but it's a negative statement. Might keep as part of Requirements? Might be considered filler. Probably we can omit as it's not adding new info. Why This Role: includes real scope, room to grow, company stats. Could be part of About the role or separate but we don't have a heading for that. Could incorporate into About the role. Location: "This role will be located in NYC along with the CEO and other key roles in the business. Hearth believes in the energy, connection, and serendipity of in-person/hybrid work culture (3+ days/week) for builders who are committed to building truly innovative software and making a significant positive impact in the world." We can put location info in Schedule section? Or we could have a separate Location heading but not in allowed list. Since schedule includes on-site expectations, we can include location there. Benefits list: - Mission-driven, values-based culture - Unmatched opportunities to learn and develop; front-row seat at a fast-growing tech startup - Generous PTO, plus paid company holidays - Medical, dental, and vision options - 401(k) - Free Employee Assistance Program - Parental Leave Program - Pet Insurance Pay: "The Pay Range For This Role Is 110,000 - 135,000 USD per year(New York)". We'll output as Pay. Schedule: On-site five days a week, hybrid expectation 3+ days/week. We'll phrase: "Expected to be on-site at the SoHo office five days per week, with a hybrid in-person/work culture expectation of 3+ days/week." Now produce HTML. We must not include any extra text outside HTML. Use

headings,

for prose,

• for lists. Let's craft. About the role paragraph: combine About Hearth and The Opportunity and Why This Role maybe. Paragraph: "Hearth is the AI growth system for America's home improvement contractors, serving 15,000+ paying customers, default profitable, and backed by top-tier investors like Founders Fund and 8VC. The company provides revenue‑critical software that tradespeople rely on to run their businesses and is now building an autonomous AI employee for every contractor that answers calls 24/7, qualifies leads, and books jobs so small businesses never miss a lead. As the Senior IT and Security Specialist you will operate as a team of one, keeping employees unblocked, owning onboarding/off‑boarding, managing the Mac fleet, and maintaining the SOC2 compliance program, with the opportunity to audit existing systems and scale them to support growth." That seems good. Now Responsibilities: list items from What You'll Do and maybe success metrics. We'll list: - Be the first stop for IT issues across the company, resolving day‑to‑day tickets (≈10/day) quickly and independently. - Own onboarding and off‑boarding end to end, documenting the process so a new hire’s first day feels seamless. - Run SOC2 compliance in partnership with People Operations, keeping the company audit‑ready in Vanta. - Manage the end‑to‑end lifecycle of the MacBook fleet: provisioning, deployment, MDM administration, security compliance, updates, and onboarding/off‑boarding. - Administer the Mac fleet, tighten access across tools such as Dialpad and Salesforce, and identify smarter ways to run IT, including automating repetitive support with AI where appropriate. - Expand into Office Manager responsibilities (reception, supplies, guest coordination) if desired, with compensation adjusted accordingly. We could also include success metrics but okay. Requirements (must-haves) list: - Prior experience as the main IT point person or core IT specialist at a company of similar size, able to operate independently without hand‑holding. - Mac fleet administration experience, preferably from another startup. - Strong written communication for clear, polished Slack‑based correspondence. - Working knowledge of SOC2 compliance. - Ability to be on‑site at the SoHo office five days per week. Qualifications (nice-to-haves) list: - Experience building AI‑powered workflows or automations (e.g., auto‑resolving routine support tickets). - Familiarity with Okta or similar identity/access management tools. - Comfortable owning the SOC2 process in a tool like Vanta (deep compliance background not required; most is learnable). Benefits list: - Mission‑driven, values‑based culture - Unmatched opportunities to learn and develop; front‑row seat at a fast‑growing tech startup - Generous PTO, plus paid company holidays - Medical, dental, and vision options