Skip to content
Away

IT & Security Manager

NYC: Soho HQUnited States
Manager · FullTime · Information Technology
POSTED 5 NOVVERIFIED 1H AGO
Apply Ask
Role
6 days opentrue age
Posted 5 Nov
Payats field
$130k–135kposted
▼ −39% vs market median $218k
$130k$230k
Market p25–p75
$150k–$230k
New York · n=13 · 365d to 11 Nov
CompanyAway →
33open roles
Opened · 30d
+2
Closed · 30d
−2
10d of snapshots · 30d window
Market
618open · Manager Security
Opened · 7d
+7111% of open
All security
8,380open
All tracked boards · live 12 Nov · n=618

About Away

At Away, we design for the reality of travel so you can embrace the journey in full. Launched in 2016 with one thoughtfully designed carry-on, we now offer luggage, accessories, and travel essentials through ecommerce, our retail stores, and wholesale partners. The magic of travel is mirrored in the work we do to bring Away to life, and we invite you to be part of crafting what’s next.

Join The Crew

We are hiring an IT & Security Manager to join our IT & Security team. This position reports to the Director, IT & Information Security and takes Away further by serving as a highly trusted technical anchor for the brand. In this role, you’ll be empowered to shape modern, resilient IT and security practices that directly protect our people, safeguard our assets, and enable our global business to scale seamlessly.

What you’ll do as the IT & Security Manager

You'll own and maintain Okta as our central identity provider and system of record for access (SSO/SCIM, RBAC, and JML) across global entities and retail

You’ll design and manage automated lifecycle workflows and access reviews via Okta Workflows and Rippling integrations to ensure continuous data integrity

You'll strengthen authentication with phishing-resistant MFA, privileged access hardening, and device-based conditional access

You'll own the day-to-day execution of the information security program by driving the end-to-end vulnerability management lifecycle, partnering with our outsourced SOC to lead security incident triage and escalation, enforcing access-linked security awareness training, and tracking operational risk posture against functional benchmarks

You'll protect data in our collaboration platforms through SaaS backup and restore testing, OAuth and integration governance, retention and legal hold, and tiered DLP

You'll review new AI and SaaS tools for security and data handling, and keep contractors in a managed virtual desktop environment

You'll govern our enterprise AI platforms, including seats, access tiers, token and API security, and spend, and lead fleet-wide rollout of AI client apps with the IT Operations Engineer

You'll run Service Management as a product that Logistics, Retail Ops, and other teams manage themselves, supported by SLAs, metrics, and documentation

You'll serve as the primary IT partner for People & Culture, Retail Ops, and Logistics, leading site-based IT implementations and cross-functional projects from inception to completion

Who you are

You have a minimum of 4 years of experience in information security operations, identity & access management, or IT operations with a security mandate, including ownership of an identity provider (Okta or equivalent) across multiple entities or locations; Okta Certified Administrator certification or equivalent is highly preferred, but not required

You have a proven track record of independently managing identity infrastructure (Okta enterprise-scale) and driving cross-functional technical projects end-to-end with moderate guidance

You've managed an identity provider (Rippling, Okta, Entra, or similar) and reconciled data across systems with discipline, planning for downstream impact before cutover. You've built automations with Okta Workflows or a comparable tool

You know data protection tooling (DLP or CASB, SaaS backup, ransomware recovery), have tested a restore, have run vulnerability management and remediation tracking, and can map operational work to a recognized security framework

You've administered an enterprise AI platform (e.g., Claude, ChatGPT), managing access, usage, and spend, and know endpoint management well enough to partner on fleet-wide deployments

You've administered a service-management platform (Jira Service Management or equivalent), including permissions, workflows, and multi-team rollout

You're comfortable owning ambiguous, cross-departmental projects from scoping through close-out with minimal oversight

You communicate clearly in writing; this role produces documentation other non-technical teams rely on directly

Source · AwayFirst seen 6 NovOriginal ↗