IT & Security Manager

Why This Role / Why Now

Key Responsibilities

• IT operations: Own our core internal systems end-to-end: accounts, devices, identity and access management, onboarding and offboarding, the FAR.Labs office network, and the daily support that keeps a growing team working.
• Security remediation: Work through our known security gaps, prioritized by risk. Access controls, endpoint hardening, data protection, data governance, and vendor and application risk are the near-term substance.
• Self-serve infrastructure: Reduce the amount of work that has to route through you. Partner with Business Operations and other teams to design systems and processes that reduce manual work.
• Cross-functional partnership: Work with team leads across Research, Operations, Futures (events), and Communications to understand how they actually work and help them build securely inside their own domains. You work cross-functionally to drive AI adoption.
• Building the team: Hire the in-person IT Coordinator, then manage and develop them. You get to define the role in accordance with the organization’s needs. Over time, this team may grow.
• Internal communication and change management: Roll out changes in a way people can live with. You communicate clearly about what is changing and why, and establish feedback loops to continue iterating post-deployment.

Must-Have Qualifications

• You have owned IT and security at a technical organization of roughly 30 to 150 people, ideally as the first or sole person to do so. You built the function yourself, without a team already in place around you.
• You are comfortable in a terminal and can code. You do not need to be an excellent engineer, but you are not afraid of it. You reach for automation before a manual process.
• You think about the people using what you build. You go after root causes instead of managing symptoms; you can point to a system you redesigned so that a whole class of requests stopped arriving, and you treat that as ongoing work rather than a one-time project.
• You have done hands-on security work driven by threat models. You can say who you were defending against and what you chose not to spend effort on, not just which frameworks you mapped to.
• You have implemented and owned core identity and device infrastructure, including MDM and SSO.
• You are fast and service-oriented. You read the support queue as information about the system, and the people you have supported would say you were reliable.
• You communicate clearly across technical and non-technical audiences. You can point to a time when you rolled out something that made someone's day harder, and you brought them along anyway.
• You use LLMs regularly in your own work and have an opinion on where they help and where they do not.

Nice-to-Have Qualifications

• You care about AI safety or security, or you are demonstrably curious about it. You understand why this work matters and you help assess the value of the risk we’re taking on.
• You have hired, managed, or mentored a junior teammate.
• You engage with security as a craft outside of work: your own compute build or a home lab, capture-the-flag competitions, side projects, or conferences like DEF CON or CCC.
• You have experience obtaining SOC 2 Type 2 and complying with GDPR. We are open to contracting out much of the work in obtaining certifications – our primary goal is to improve our actual security posture, not achieve certifications, but they may be a necessary step in certain engagements.
• You have experience in fast-paced environments. You've worked in startups, nimble nonprofits, or high-growth teams before and can adapt to change quickly.
• You have worked in a research organization, a deep-tech startup, or a similarly technical environment.

Benefits*

• 🩺 Health Insurance - 94% of Insurance premium paid by Organization commencing within 1 month after your start date
• 💰 Retirement - 401(k) plan with up to 2% match
• 🏝️ PTO - 25 days Paid Time Off per year, accrued weekly and up to 10 days of paid sick leave per year
• 🚼 Paid Leave - Paid Bereavement, Family, Medical and Pregnancy Disability Leave
• 🖥️ WFH Stipend & Equipment - Work computer and stipend provided for eligible employees
• 🍽️ Catered Meals (Berkeley Office Only) - Catered lunches and dinners on workdays at our office
• *(Available only to full-time employees located in the US)

Interview process