Corporate IT Lead

Corporate IT Lead

Remote | Senior Individual Contributor | Reports to the SVP of Engineering

Rate: USD 23–25

Must-haves

• End-to-end SOC 2 ownership: Experience owning or substantially leading an internal SOC 2 program, with accountability for decisions and outcomes.
• Business understanding of SOC 2: Ability to explain its purpose, connect it to customer trust and commercial needs, and translate those objectives into practical controls.
• External auditor relationship: Experience directly managing or materially leading auditor engagement, including discussions about scope, controls, evidence, findings, and remediation.
• Independent judgment: Ability to assess risk, challenge assumptions, recommend solutions, and make sound decisions without step-by-step direction.
• MSP and vendor management: Proven ability to delegate execution, define service expectations, and hold providers accountable.
• Lean-environment ownership: 5+ years of relevant IT experience, including accountable ownership of corporate IT operations or a substantial part of the function.
• Solo contributor operating model: Comfort delivering through MSPs, contractors, and vendors, with no direct reports or mandate to build an internal team.
• Technical foundation: Working knowledge of Microsoft 365, Entra ID, identity and access management, SaaS governance, and Windows and macOS endpoint management.
• International collaboration: Availability to collaborate across US and UK/European working hours and travel to the United Kingdom approximately 1–2 times per year.

Experience limited to external auditing, evidence collection, or implementing controls designed by others is insufficient on its own. Candidates must demonstrate thoughtful program ownership and business judgment.

Key skills

• SOC 2 program strategy, scope, control design, audit readiness, and remediation.
• Risk assessment and prioritization.
• Auditor and cross-functional stakeholder management.
• Corporate IT strategy and systems governance.
• MSP oversight, service delivery, and vendor accountability.
• Identity and access management: SSO, MFA, privileged access, and joiner/mover/leaver processes.
• Microsoft 365 and Entra ID.
• Windows and macOS endpoint governance.
• SaaS inventory, licensing, access controls, and cost management.
• Corporate security and incident response.
• Information management, policy development, and documentation.
• AI governance and evaluation of data-handling risks.
• Clear communication, autonomous decision-making, and effective delegation.

About the role

Our client is looking for a Corporate IT Lead to own its corporate technology environment, IT service delivery, security, and SOC 2 program.

This is a high-autonomy role for someone who combines technical understanding with business judgment. You will identify what the organization needs, recommend practical approaches, make sound decisions, and drive outcomes through managed service providers, specialist contractors, vendors, and internal stakeholders.

A central responsibility is end-to-end ownership of SOC 2. Our client needs someone who understands why a company pursues SOC 2, how it supports customer trust and commercial requirements, and how to translate those objectives into a credible, sustainable program. You should be comfortable making decisions about scope, control design, accountability, and remediation, as well as managing the relationship with external auditors.

This is a solo, senior individual contributor role with no direct reports. The operating model scales through effective delegation, clear governance, and strong vendor accountability. Success means building a reliable corporate IT function through these partners.

Our client is a remote-only company with employees across the United States, United Kingdom, South America, and Europe. MSPs and specialist contractors deliver much of the endpoint management, hardware logistics, and technical support. You remain accountable for the quality, security, and effectiveness of those services.

What you will own

SOC 2 program ownership and business alignment

• Own the client’s SOC 2 program end-to-end, including program planning, audit readiness, the external auditor relationship, control-owner coordination, remediation, and ongoing improvement.
• Understand the business purpose of SOC 2 and connect program decisions to customer expectations, commercial needs, organizational risk, and operational realities.
• Lead decisions and recommendations on audit scope, control design, and implementation, involving the appropriate business and technical owners.
• Serve as the primary point of contact for external auditors, managing expectations, timelines, requests, and discussions about how controls address risk.
• Establish clear control ownership across the company and ensure stakeholders understand their responsibilities and the reasoning behind them.
• Evaluate whether controls are appropriate, effective, and sustainable, and improve