> Markdown version of [/jobs/ext/1453144-vp-of-it-and-security](https://www.wearedevelopers.com/jobs/ext/1453144-vp-of-it-and-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # VP of IT and Security - **Company:** KARBON, INC. - **Location:** Denver, CO, United States (Remote available) - **Experience:** Expert - **Salary:** $220,000.0 - $245,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Communications Protocols, Cyber Security, Disaster Recovery, Identity and Access Management, Office Suite, Security Information and Event Management, Cloud Platform System, Okta, Office365, Software Security, Azure Security Center, Casper Suite, Gsuite - **Published:** July 26, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7c8f23adb65039a7 ## About the Role * 12+ years in IT and security with at least 5 years in a senior leadership role. * Proven track record managing or building an internal IT function - experience having transitioned from an MSP model is a strong advantage. * Hands-on operational & security experience and able to assist teams when required. * Deep familiarity with compliance frameworks such as SOC 2. * Experience in a B2B SaaS environment is strongly preferred. Technologies * Identity & Access Management (Okta & Entra preferred) * Mobile Device Management / Endpoint Management * EDR solutions such as Jamf Protect & Microsoft Defender for Endpoint * At least one major cloud platform either Azure, AWS or GCP * Office Productivity Platform - Google Workspace (preferred) or O365 * Netskope Experience highly regarded Skills and Approach * You can move between strategy and execution without losing momentum in either direction. * Strong communicator able to translate technical concepts into business language for a CEO, board, or enterprise customer. * Commercially aware - you understand how security and compliance decisions affect sales, customer trust, and product velocity. * Comfortable with ambiguity and building in environments where process is still being defined. * Collaborative by default, with the confidence to hold the line when it matters. ## Description This is a foundational leadership role at Karbon. As VP of IT & Security, you will own the following areas: * Internal IT - Identity & Access, devices and configuration * Security - Corporate & Application * Governance, Risk & Compliance * Enterprise incident response, business continuity, and disaster recovery You are a player-coach. You'll set strategy and own the roadmap, but you're comfortable rolling up your sleeves, analyzing logs, writing and tweaking policies, configuring tools, running a vendor evaluation, or sitting in a SOC 2 evidence review. You'll report directly to the CEO and work closely with Engineering, Finance, Legal, and the broader executive team. You will lead, on day one, an existing small SecOps team that will report to you. This role doesn't exist yet in its current form. You'll be building something meaningful from the ground up and leading the migration of our IT function from our MSP to an in-house team., * Own the day-to-day running of Karbon's device fleet and internal systems. * Establish and manage IT service delivery and support, including helpdesk operations, incident and problem management, and SLAs as we migrate away from our MSP to an internal function. * Own identity and access management (Okta) including device provisioning and employee onboarding and offboarding. * Manage endpoint management (MDM) and device policies across our global fleet of pc's and mac's. * Build and manage vendor relationships, including contracts, renewals, and performance. * Identify opportunities to optimize licence costs., * Define, maintain, and champion Karbon's strategy, policies, and standards across the organisation. * Own the internal security tooling stack including EDR, SIEM, email security. * Lead the Application Security team. * Develop and maintain Karbon's information security policies and risk management framework. Governance, Risk and Compliance * Maintain Karbon's Risk Register and own Karbon's SOC 2 program end to end: audit readiness, control design, and auditor relationships, coordinating with internal teams and external partners as control owners for evidence collection. * Serve as the internal subject matter expert on compliance requirements for customer, partner, and enterprise sales conversations. Enterprise Incident Response, Business Continuity & Disaster Recovery * Own and maintain the incident response plan and playbooks * Define incident severity, escalation paths, and communication protocols, coordinating legal, insurance, and regulatory notification obligations during significant events. * Own business continuity plans and backup strategy. ## Related Videos - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) - [Un-complicate authorization maintenance](https://www.wearedevelopers.com/videos/889-un-complicate-authorization-maintenance) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)