> Markdown version of [/jobs/ext/1313649-director-it](https://www.wearedevelopers.com/jobs/ext/1313649-director-it). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, IT

- **Company:** STEPFUL, INC.
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $200,000.0 - $250,000.0
- **Contract:** Permanent contract
- **Skills:** Software as a Service, Identity and Access Management, Information Technology Operations, Okta, Information Technology, Casper Suite, Gsuite
- **Published:** July 17, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ab0f2f7a99cab799

## About the Role

* 8+ years of IT experience, including experience leading IT or security functions at a high-growth startup
 * Hands-on experience driving a SOC 2 certification (Type I and II) from readiness through audit
 * Deep expertise with the modern IT stack: MDM (e.g., Kandji, Jamf), identity providers (e.g., Okta, Google Workspace), and endpoint security tooling
 * Proven ability to operate as a strategic leader and a hands-on individual contributor at the same time
 * Strong vendor management skills across hardware, software, and audit partners
 * Exceptional communication skills with the ability to make security and compliance accessible to non-technical teams
 * A builder's mindset - you're energized by creating processes and systems from scratch, not inheriting them

Bonus points if:

 * You have experience with HIPAA or healthcare data compliance
 * You've built an IT function from zero at a scaling company
 * You've worked in EdTech, healthcare, or another mission-driven industry

## Description

We're hiring our first Director of IT to build Stepful's IT and security function from the ground up. You'll own our path to SOC 2 certification and everything that keeps a fast-growing company running securely - from identity and access management to the laptop that lands on every new hire's desk. This is a hands-on role to start: you'll operate as an individual contributor, set the strategy, and build out a team as the company scales.

This role reports directly to the SVP, Engineering and partners closely with Engineering, Finance, People, and our B2B teams across the organization.

This is a hybrid opportunity based out of our NYC office, requiring three days/week (Tuesday, Wednesday, Thursday) in office.

What you'll do:

 * Security & Compliance: Own Stepful's security program end to end, leading our SOC 2 effort from readiness assessment through audit and ongoing compliance
 * Define and enforce security policies, identity and access management, and least-privilege controls across the organization (SSO, MFA, access reviews)
 * Support our B2B healthcare partnerships by owning security questionnaires, vendor assessments, and customer audit requests
 * IT Operations: Own the full equipment lifecycle - procurement, MDM deployment, inventory, and seamless onboarding/offboarding for every employee
 * Manage our SaaS application stack, including provisioning, access governance, vendor security reviews, and spend optimization
 * Build scalable IT support processes and serve as the escalation point for day-to-day IT needs, rolling up your sleeves while the function is small
 * Partner with Engineering on incident response, endpoint security, and infrastructure hardening
 * Team Building: Define the long-term IT roadmap and build, hire, and lead the team as Stepful's needs grow


## Related Videos

- [Recruitment Reinvented: Bold strategies and the $10K signing incentive](https://www.wearedevelopers.com/videos/1068-recruitment-reinvented-bold-strategies-and-the-10k-signing-incentive)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [How to Answer the Interview Question: “Why Do You Want to Be a Software Engineer?”](https://www.wearedevelopers.com/magazine/392-how-to-answer-the-interview-question-why-do-you-want-to-be-a-software-engineer)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)