IT & Security Manager

San Francisco, CA · In Person · Full-Time

About Vizcom

At Vizcom, we’re reimagining how physical products are designed by fusing AI with human creativity to help designers move from sketch to reality at lightning speed. We’re building AI-powered sketching and collaboration tools that make designing feel as natural as drawing and as powerful as imagining something into existence. We’re a small, fast-moving team that values initiative, experimentation, collaboration, and an eye for beauty.

The Role

As the IT & Security Manager, you’ll own Vizcom’s day-to-day IT function and the operational execution of our security program, helping build the systems, processes, and infrastructure that support our growing team.

You’ll be the primary point of contact for employee IT needs and manage everything from identity and access management to SaaS administration, device management, troubleshooting, endpoint security, and IT security operations.

This is a hands-on role for someone who enjoys solving problems, creating order, and building scalable processes. You’ll report to the Head of People and work closely with our Senior Manager, Compliance & Trust, who will provide functional direction on security and compliance priorities. You’ll also partner with Engineering and teams across Vizcom to make sure employees have the access, tools, and support they need while keeping our systems secure and well managed.

We’re not looking for someone to build a large IT organization or introduce unnecessary enterprise complexity. We’re looking for a strong operator who can own the work, improve how we do it, and build an IT and security operations foundation that can scale with us.

How You’ll Do It

Serve as the primary point of contact and owner for day-to-day employee IT support across macOS, Windows, mobile devices, SaaS applications, peripherals, conference room technology, and workplace connectivity

Own Tier 1 and Tier 2 support from intake through resolution, including login and MFA issues, application errors, VPN and connectivity problems, device performance, and peripherals

Establish a simple, effective process for employees to request IT support and create clear expectations around response and resolution times

Escalate issues to vendors, Engineering, or other technical owners when appropriate, providing the troubleshooting, reproduction steps, and logs needed to resolve them efficiently

Own employee account creation, access changes, and deactivation across company systems

Manage identity and access, including SSO, MFA, permissions, role-based access, privileged access, and regular access reviews

Administer core employee systems and SaaS applications, including Google Workspace, Slack, password management, and other company-wide tools

Apply least-privilege principles to provisioning and access management and regularly identify stale accounts, unnecessary permissions, and standing administrative access

Own device management, including MDM, endpoint security, encryption, patching, software deployment, updates, remote wipe capabilities, and device compliance

Manage the ongoing lifecycle of company hardware, including inventory, troubleshooting, repairs, replacements, warranties, recovery, retirement, and secure disposal

Partner with People on employee onboarding and offboarding, owning the technical and security components of the employee lifecycle, including accounts, permissions, device configuration, software, access removal, session and credential revocation, and hardware recovery

Work closely with the Senior Manager, Compliance & Trust to operationalize security requirements and maintain relevant technical security controls

Monitor and triage EDR and security alerts, investigate detections, identify false positives, and escalate confirmed or potentially significant incidents to the appropriate security owner

Tune security alerts and suppression rules where appropriate to reduce recurring noise and improve the effectiveness of monitoring

Serve as a first responder for endpoint security incidents, including isolating devices, collecting relevant artifacts, preserving evidence, and documenting actions taken