Security & IT Manager

About the role

Pasito is building an AI‑native workspace for employee benefits and needs a Security & IT Manager to own its security, IT, and compliance program. This senior, high‑visibility role will connect engineering, HR, legal, sales, auditors, and customers to ensure robust security and smooth IT operations.

Key responsibilities

• Manage the full IT footprint, including domain, Google Workspace, and SaaS portfolio.
• Oversee identity and access governance (SSO, MFA, role‑based controls, least‑privilege architecture) with quarterly reviews.
• Lead onboarding/offboarding, device enrollment via MDM, encryption, patching, and endpoint protection.
• Maintain Vanta compliance operations, resolve failing tests, and keep audit trails current.
• Run the annual SOC 2 Type II audit and ensure continuous HIPAA alignment.
• Coordinate yearly penetration testing, vendor risk assessments, and AI security governance.
• Partner with legal to manage security exposures and maintain a risk log.
• Work with engineering to remediate vulnerabilities and drive cross‑functional security projects.
• Support sales security responses, completing SIG, CAIQ, and custom questionnaires.
• Collaborate with HR on background checks, policy sign‑offs, and security training.

Required profile

• 5+ years in security, IT, or GRC with ownership of at least one full SOC 2 Type II cycle.
• Hands‑on experience running IT operations at a startup or growth‑stage company.
• Experience with compliance automation platforms (Vanta, Drata, Secureframe).
• Strong project‑management skills and ability to drive cross‑functional work.
• Excellent written and verbal English communication.
• Based in Latin America with strong overlap with U.S. business hours.

Required skills

• Vanta compliance platform
• SOC 2 Type II audit processes
• HIPAA regulatory requirements
• Penetration testing coordination
• Identity and access management (SSO, MFA, role‑based access)
• Mobile Device Management (MDM) solutions
• Google Workspace administration
• SaaS application administration

What we offer

• Strategic visibility reporting to the VP of Engineering and close work with leadership.
• Full ownership to build and scale the security, IT, and compliance function.
• Competitive salary paid in USD.
• Remote‑first work model for any location in Latin America.
• Learning and development budget for certifications, courses, and conferences.
• Annual team offsites and an inclusive, equal‑opportunity culture.