Silver.dev - Pasito (YC S22) - Security & IT Manager
Requirements
• 5+ years in security, IT, or GRC, including personally owning at least one full SOC 2 Type II cycle end to end. • Hands-on experience running IT operations at a startup or growth-stage company: identity and access management, SSO, MDM, and SaaS administration. • Experience operating a compliance automation platform in production (Vanta, Drata, or Secureframe). • Enough technical depth to read a pen-test report, judge severity, and work credibly with engineers on remediation. • Strong project-management skills. You keep cross-functional work moving with clear owners and deadlines. • Excellent written and verbal English communication. You can explain risk clearly to engineers, lawyers, executives, and customers. • Highly organized and deadline-driven. Much of this job is time-sensitive and deal-blocking. • Based in Latin America, with strong overlap with U.S. business hours. • CISA, CISSP, or ISO 27001 Lead Auditor certification. • Healthcare, HIPAA, or benefits/insurance industry experience. • Experience at an early- or growth-stage B2B SaaS company selling to enterprise or regulated buyers.
Responsibilities
• IT, ACCESS & DEVICE MANAGEMENT • Direct Pasito’s complete IT footprint, including domain management, Google Workspace, and our broader platform portfolio. • Oversee identity and permission governance: SSO, MFA, role-based controls, least-privilege architecture, and routine quarterly reviews. • Lead team onboarding and offboarding procedures, ensuring immediate provision of system access for new joiners and instant revocation upon departure. • Supervise organizational hardware via our MDM solution, handling enrollment, encryption protocols, patching cycles, endpoint protection, and inventory logging. • Act as the primary point of contact for internal IT issues and access requests. • SECURITY & COMPLIANCE PROGRAM • Vanta: Maintain daily operations within Vanta by resolving failing tests, delegating fixes, keeping audit trails current, and eliminating operational backlogs. • SOC 2 Type II: Manage the annual audit execution, from gathering documentation to control mapping and liaison with external auditing teams. • HIPAA: Ensure continuous alignment with HIPAA regulations, managing executed BAAs and operational policy frameworks. • Penetration testing: Facilitate yearly security evaluations from partner selection through remediation, validation, and package preparation for clients. • Vendor & subprocessor risk: Conduct thorough security evaluations of third-party vendors including AI, payroll, and HRIS tools, managing associated DPAs, BAAs, and public records. • Program hygiene: Drive policy updates, risk reviews, security training, and the upkeep of our internal trust resource hubs. • AI security: Establish AI risk governance models and monitor third-party artificial intelligence platform integration. • LEGAL & RISK PARTNERSHIP • Work closely with legal advisors to identify, analyze, and minimize potential security and compliance exposures across the organization. • Maintain an active risk log, offering transparent and consistent updates on organizational security posture to leadership. • Collaborate with leadership to ensure security and compliance as product expands and identify risks. • ENGINEERING REMEDIATION & PROJECT MANAGEMENT • Partner with software engineering teams to resolve vulnerabilities, audit items, and testing findings with clear accountability and timelines. • Lead operational security projects across departments, managing roadmaps, dependencies, and deliverables. • Direct our sales security response process, completing SIG, CAIQ, and custom client questionnaires while connecting complex queries to technical leads to keep pipeline moving. • PEOPLE & HR PARTNERSHIP • Coordinate with HR on security-adjacent personnel operations, including background verifications, policy sign-offs, team security training, and lifecycle checklists. • Help foster a security-focused culture by offering clear, practical, and actionable advice to the team.
Benefits
• Strategic visibility: Report to the VP of Engineering and work closely with leadership, HR, legal, and sales on decisions that shape how Pasito scales. • Ownership: Build and own the security, IT, and compliance function from the ground up. • Growth: Join at a pivotal stage and grow as the company scales. • Competitive compensation: Salary benchmarked to your market, paid in USD. • Remote-first: Work from anywhere in Latin America with a highly collaborative team. • Learning and development: A budget to invest in yourself, whether that’s certifications, courses, books, or conferences. • Team offsites: We get together in person every year to work, connect, and have fun. • EQUAL OPPORTUNITY
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT