• Own and maintain the IT and Security roadmap aligned to business needs, SOC 2 expectations, and customer requirements • Prioritize and sequence investments across identity, devices, endpoint protection, SOC 2 controls, and collaboration tooling • Define and communicate IT and Security standards, policies, and architectural decisions • Partner with leadership to develop budget forecasts and resourcing plans for IT and cybersecurity • Identify operational and compliance risks and propose mitigation strategies and tradeoffs • Administer collaboration and identity platforms (Google Workspace, Microsoft 365, Slack, IAM, MDM, endpoint protection, etc.) • Configure and manage onboarding/offboarding workflows and IT provisioning • Implement and maintain IT helpdesk processes (low-volume) • Support vendor evaluations, integrations, and continuous improvements across the IT stack • Maintain secure device and access management across remote environments • Execute SOC 2 readiness and evidence collection in partnership with external consultants • Maintain IT and security policies, documentation, and control evidence • Coordinate responses to client security questionnaires and due diligence requests • Support vendor risk management and access control processes • Monitor and support incident response workflows in collaboration with leadership and vendors • Implement incremental improvements to device management, identity tooling, and endpoint management • Support responsible adoption of AI tooling and assess operational risks on a practical basis • Document workflows and train internal users on IT processes and tools