IT Operations & Security Manager

About H: H exists to push the boundaries of superintelligence with agentic AI. By automating complex, multi-step tasks typically performed by humans, AI agents will help unlock full human potential. H is hiring the world’s best AI talent, seeking those who are dedicated as much to building safely and responsibly as to advancing disruptive agentic capabilities. We promote a mindset of openness, learning, and collaboration, where everyone has something to contribute. Our role: Key

Responsibilities: Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance. Ensure secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness.

The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation.

Requirements Identity & Access Management Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP) Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications Hands-on experience performing user access management, including joiner/mover/leaver workflows Experience conducting periodic access reviews and least-privilege audits Cloud & Infrastructure Access Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential Device & Endpoint Management Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar) Compliance & Security Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance Vendor Management Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments) Ability to track license utilization and right-size seats to control spend Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments Maintains an up-to-date vendor inventory and renewal calendar Automation & Scripting Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus