IT & Security Compliance Manager

- Own identity and access management for Warp employees, including implementing and managing Okta, SSO, MFA, role-based access, and application provisioning - Own the IT side of the employee lifecycle, including onboarding, offboarding, device provisioning, access changes, and asset management - Own and continuously improve our SOC 1, SOC 2, HIPAA, and other security and compliance programs - Translate compliance requirements into practical technical and operational controls rather than treating compliance as a point-in-time audit exercise - Automate access reviews, evidence collection, employee provisioning, and other repetitive security and IT workflows - Manage vendor security and third-party risk, including security reviews and ongoing vendor access - Own office and physical security, including badge access, visitor management, and related policies and systems - Partner with engineering on security initiatives that cross corporate and product infrastructure - Work closely with product and engineering to inform Warp's IT product suite, bringing firsthand experience from operating these systems internally - Dogfood Warp's IT products and help identify where we can automate or fundamentally improve the work IT teams do today YOU'LL BE GOOD FOR THIS ROLE IF YOU - Like building systems more than administering processes - Are equally comfortable configuring Okta, working through an auditor request, investigating an access issue, and writing the policy that prevents it from recurring - Have strong opinions about how modern IT should work and are excited to help turn those opinions into product - Understand that good security should make the right thing easy rather than create unnecessary bureaucracy - Can distinguish between a meaningful security control and compliance theater - Automate repetitive work instead of accepting it as part of the job - Are comfortable owning ambiguous problems without waiting for someone to give you a playbook - Communicate clearly with both technical and non-technical teams - Want to build the IT and security foundation for a company growing quickly rather than inherit a mature enterprise program

- 100% Health Coverage: Comprehensive medical, dental, and vision plans for you and your dependents. - 401(k) Matching: Start investing in your future from day one. - Flexible PTO: We offer uncapped flexible PTO, meaning you’re trusted to take the time you need to recharge while balancing your responsibilities and team commitments. - Commuter Benefits: Pre-tax commuter benefits for your daily trip to our NYC office. - Catered Lunch Daily: Great food, every day, on us. No meal prep, no decision fatigue. - Quarterly Offsites: Beautiful locations to connect as a team. Past locations include Spain, Catskills, and San Francisco. Warp is based in New York City, and most of our team works together in-office 5x per week. Please refer to the top of this page for this position's hiring location and working model.

ABOUT WARP Warp is the AI-native Employee Management Platform for ambitious companies. HRIS, payroll, benefits, IT, tax compliance, and more, all built from scratch on one AI-native platform. Every company runs on its people, and the software that manages them is some of the oldest in the enterprise. Incumbents like ADP and Workday built their businesses on complexity and large ops teams. Warp is built for AI to be the primary operator. Every advance in LLM capability widens our lead. We process $X billion in annual payments for high-growth companies across all 50 US states + globally. We've raised $85M from Battery Ventures, Sapphire Ventures, Peak XV, Sound Ventures (Ashton Kutcher), and Y Combinator, alongside operators including Tobi Lütke (Shopify), Claire Hughes Johnson (Stripe), and the founders of Dropbox and Replit. Our team comes from MIT, Ramp, Brex, Google, Gusto, Rippling, and more. We hire people who ship constantly, own outcomes, and care about craft. If you want to automate an entire category of work that every company depends on, this is the place. ABOUT THE ROLE Warp has grown from 10 to 70 people in the past year, and the systems that work for a small startup don't work for long at this scale. We're looking for an IT & Security Compliance Manager to build and own the infrastructure that keeps Warp secure, compliant, and operational as we continue to grow. You'll own how Warp employees access the tools and systems they need to do their jobs, how devices are provisioned and secured, how we meet our compliance obligations, and how we protect our offices and physical infrastructure. That includes identity and access management, endpoint management, employee onboarding and offboarding, SOC 1, SOC 2, HIPAA, vendor security, and physical security. This role also has a unique opportunity to directly influence what we build for our customers. IT is a growing part of the Warp product, and you'll be both the person operating these systems internally and an expert helping us rethink how they should work. You'll work closely with product and engineering to inform our IT product suite across identity and access, device management, employee lifecycle, and more. You'll dogfood what we build, identify where existing IT tools and workflows fall short, and help us build a better version for our customers. This is a hands-on role. You'll implement systems yourself, automate processes that shouldn't be manual, work directly with engineering and operations, and own projects from identifying the problem through implementation. We're looking for someone who can operate the systems we need today while designing them for a company many times our current size. WHAT YOU'LL DO - Own identity and access management for Warp employees, including implementing and managing Okta, SSO, MFA, role-based access, and application provisioning - Own the IT side of the employee lifecycle, including onboarding, offboarding, device provisioning, access changes, and asset management - Own and continuously improve our SOC 1, SOC 2, HIPAA, and other security and compliance programs - Translate compliance requirements into practical technical and operational controls rather than treating compliance as a point-in-time audit exercise - Automate access reviews, evidence collection, employee provisioning, and other repetitive security and IT workflows - Manage vendor security and third-party risk, including security reviews and ongoing vendor access - Own office and physical security, including badge access, visitor management, and related policies and systems - Partner with engineering on security initiatives that cross corporate and product infrastructure - Work closely with product and engineering to inform Warp's IT product suite, bringing firsthand experience from operating these systems internally - Dogfood Warp's IT products and help identify where we can automate or fundamentally improve the work IT teams do today YOU'LL BE GOOD FOR THIS ROLE IF YOU - Like building systems more than administering processes - Are equally comfortable configuring Okta, working through an auditor request, investigating an access issue, and writing the policy that prevents it from recurring - Have strong opinions about how modern IT should work and are excited to help turn those opinions into product - Understand that good security should make the right thing easy rather than create unnecessary bureaucracy - Can distinguish between a meaningful security control and compliance theater - Automate repetitive work instead of accepting it as part of the job - Are comfortable owning ambiguous problems without waiting for someone to give you a playbook - Communicate clearly with both technical and non-technical teams - Want to build the IT and security foundation for a company growing quickly rather than inherit a mature enterprise program WHAT YOU NEED - Experience owning IT, corporate security, security compliance, or a combination of these functions at a growing technology company - Hands-on experience implementing or administering identity and access management systems such as Okta - Experience with SSO, MFA, SCIM, device management, endpoint security, and SaaS administration - Experience running SOC 2 or similar compliance programs and working directly with auditors - Familiarity with SOC 1, HIPAA, and security frameworks and controls relevant to a company handling sensitive customer and employee data - Experience managing employee onboarding and offboarding from an IT and access perspective - Strong technical judgment and the ability to understand how systems interact, not just administer individual tools - High agency. You figure things out. - Willingness to work from our NYC office five days a week NICE TO HAVE - Experience building the IT or security function at a startup during a period of rapid headcount growth - Experience with scripting, APIs, or wo