Security and IT Operations Engineer

Prefect

. Run day-to-day SOC 2 compliance, including controls, evidence collection, access reviews, policy acknowledgments and training .

Posted 11/6/2026full-timeRemote • United StatesMid-LevelSenior💰 $149,000 - $219,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SOC 2 compliance management, including controls, evidence collection, and auditor collaboration. Proficient in administering corporate IT systems, automating processes, and improving access management.

Highest-signal resume keywords

SOC 2 Compliance ManagementGoogle Workspace AdministrationGRC Platform ConfigurationAutomation with Scripts and APIsEndpoint Security Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SOC 2 ComplianceControl Evidence CollectionAccess ManagementIT Systems AdministrationMac ManagementEndpoint Alert InvestigationRemediation TrackingPhishing ResponseAutomation ScriptingCross-Team Process Improvement

Soft Skills

CollaborationProblem-SolvingCommunicationProject ManagementEscalation Management

Tools & Technologies

Google WorkspaceRipplingGRC PlatformsMDM SolutionsWorkflow Tools

Industry Keywords

ComplianceIT SecurityAccess ControlIncident ResponseAccount Provisioning

Tech Stack

Tools & technologies

MacOS

About the role

Key responsibilities & impact

Run day-to-day SOC 2 compliance, including controls, evidence collection, access reviews, policy acknowledgments and training
Work directly with auditors and control owners and follow findings through resolution
Help consolidate two compliance programs by selecting and configuring a GRC platform, adapting control descriptions, and minimizing manual work
Own corporate IT, including Google Workspace, SaaS applications, onboarding/offboarding, and the Mac fleet in Rippling
Support employees with laptop and access issues and improve IT processes
Improve access-management processes for requesting, approving, granting and removing access
Manage macOS and application updates, investigate endpoint alerts, track vulnerabilities through remediation, and verify fixes
Participate in phishing and other corporate incident response
Automate repetitive IT and compliance work using scripts, APIs, workflow tools or AI
Help shape the combined company’s Security & Systems function and potentially grow into security operations, engineering, risk management or AI governance

Requirements

What you’ll need

Hands-on IT and compliance experience across both areas
Experience owning recurring SOC 2 activities and working directly with external auditors, or auditing experience
Understanding of controls, evidence demonstrating control operation, and adapting controls across systems and teams
Experience administering and securing corporate IT systems, including account management, onboarding/offboarding, and Macs managed through an MDM
Comfort with patching, endpoint alerts, remediation tracking, phishing or suspicious account activity, and employee troubleshooting
Comfort automating recurring tasks with scripts, APIs, workflow tools or AI, with an example of something built
Ability to drive work across teams, establish owners and deadlines, resolve blockers, escalate appropriately, and ensure completion and documentation
Experience with Google Workspace, Rippling, or a GRC platform such as Vanta, Drata or Thoropass
Familiarity with SSO, SCIM provisioning, or other automated account-access methods
Experience implementing or migrating an IT or compliance system, or improving a cross-team process

Benefits

Comp & perks

Remote-first team with flexible-first culture
Equity Stock Options
401(k) with 5% company match (vests immediately!)
Unlimited PTO
Medical, Dental and Vision insurance
Generous Parental Leave
Life Insurance and Disability benefits
$800/month remote work stipend