About the role
As our IT Operations & Security Manager, you'll lead and build our U.S. information security and IT operations programs, ensuring our business is secure, compliant, and prepared to scale. In this highly impactful, hands-on role, you'll lead our information security program, including SOC 2 certification, security policies, employee security awareness, and customer security support. You'll also oversee IT operations, including device management, identity and access management, employee onboarding and offboarding, and business technology administration.
Working closely with our global security team and cross-functional partners, you'll establish scalable processes, strengthen our security practices, and serve as the primary resource for internal IT and security operations.
📌 Location: Hybrid - Boston, MA preferred, or Remote (Eastern Time Zone).
✈️ Travel: Travel to Boston Office required at least 1x per quarter
👤 Reports to: Kara Witherill, Business Operations Manager
What you’ll do
- Lead and evolve our U.S. information security program, including security policies, compliance initiatives, and risk management.
- Lead our SOC 2 certification efforts and support ongoing alignment with ISO 27001 standards, including gap assessments, control implementation, audit preparation, and documentation.
- Develop, maintain, and update information security policies, procedures, and audit-ready documentation.
- Partner with our global security team to align on security standards, frameworks, and company-wide initiatives.
- Build and deliver a security awareness training program, including phishing simulations, and conduct periodic security assessments.
- Serve as the internal security expert by responding to customer security questionnaires, supporting enterprise sales opportunities, and partnering with the Sales and Solutions Engineering teams on security-related requests.
- Stay current on the evolving security landscape and proactively identify risks and opportunities for improvement. IT Operations
- Own and manage our Mobile Device Management (MDM) platform, including device enrollment, encryption, compliance, and lifecycle management.
- Manage identity and access management, including user provisioning, access governance, and regular access reviews across business systems.
- Own the IT components of employee onboarding and offboarding, ensuring secure account provisioning, timely access revocation, and documented processes.
- Evaluate, implement, and support business technology solutions that improve security, productivity, and operational efficiency.
- Assess current and prospective technology vendors to ensure they meet security and compliance requirements.
- Serve as the primary resource for internal IT support, including user access, business applications, and technology-related questions.
What you’ll bring to the team
- 4+ years of experience in information security, IT operations, or a related role in a high-growth startup environment.
- Hands-on experience with SOC 2, ISO 27001, or similar security and compliance frameworks.
- Experience implementing and managing Mobile Device Management (MDM), identity and access management, and employee onboarding and off-boarding.
- Experience administering Microsoft 365, Microsoft Entra ID (Azure AD), and Microsoft Intune.
- Strong understanding of information security best practices and risk management.
- Excellent communication skills with the ability to collaborate across technical and non-technical teams.
- A proactive, hands-on approach and the ability to build scalable processes in a growing company.
Skills Required
- 4+ years of experience in information security, IT operations, or a related role in a high-growth startup environment
- Hands-on experience with SOC 2, ISO 27001, or similar security and compliance frameworks
- Experience implementing and managing Mobile Device Management (MDM), identity and access management, and employee onboarding/off-boarding
- Experience administering Microsoft 365, Microsoft Entra ID (Azure AD), and Microsoft Intune
- Strong understanding of information security best practices and risk management
- Excellent communication skills and ability to collaborate across technical and non-technical teams
- Proactive, hands-on approach with ability to build scalable processes
- Location: Hybrid — Boston, MA preferred, or Remote (Eastern Time Zone)
- Travel to Boston office required at least once per quarter
What We Do
envelio is the trusted software partner for U.S. utilities, modernizing how the grid is planned and operated. Our Intelligent Grid Platform (IGP) helps utilities digitize and automate key processes, like grid planning, interconnection, and network model management, so teams can move faster, make smarter decisions, and invest with confidence. With envelio, utilities can: 🔹 Streamline interconnection queues 🔹 Accelerate grid modernization 🔹 Improve data quality and transparency 🔹 Support reliable, scalable operations Founded by engineers from RWTH Aachen University, envelio supports over 70+ utilities and grid operators worldwide, from local municipalities to large IOUs. We make the power grid smarter, faster, and ready for what’s next.
