{"id":2202437,"url":"https://alion.io/job/silver-dev-pasito-yc-s22-security-it-manager","title":"Pasito (YC S22) - Security & IT Manager","company":{"id":8709,"name":"Silver.dev","domain":"silver.dev","url":"https://alion.io/company/silver-dev","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":79,"open_postings":7,"ghost_share":0,"stale_share":0.857,"repost_share":0,"time_to_fill_p50_days":52,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Management","role_family":"Management","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":70000,"max":90000,"currency":"USD","period":"year","gross":null,"usd_annual":90000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Google Workspace","optional":false},{"name":"HIPAA","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-09T19:19:43Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-13T01:09:28Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About Pasito\nPasito is the AI workspace for employee benefits.\nWe’re rethinking how group insurance and benefits are underwritten, delivered, used and measured - by the people who design them and the people who depend on them. Instead of static PDFs, disconnected systems, and manual workflows, Pasito brings plan design, payroll and benefits data, claims, and financial context into a single, AI-native workspace that helps benefits actually work for the 178 million Americans who depend on this system.\nWe don’t build for brokers, carriers and employers - we build with them. That collaboration shows up in everything we ship: AI agents that extract and structure plan data, tools that turn complexity into clarity for employees, and workflows that save carriers and consultants hundreds of hours per case.\nToday, Pasito supports many of the largest insurance carriers and brokers in the U.S. We’re backed by Y Combinator, Insight Ventures and Core Innovation Capital, and we’re growing quickly. We ship fast, iterate relentlessly, and care deeply about building systems that are accurate, scalable, and human.\nIf you’re excited to work alongside exceptional operators and engineers, and apply AI in a legacy industry where precision and trust matter, Pasito is the place for you.\nThe Role\nWe’re looking for a Security & IT Manager to be the first dedicated owner of Pasito’s security, IT, and compliance program. Today this work is split across engineering, sales, and operations: Vanta, audits, pen tests, device setup, access requests, and security questionnaires all land on different people. You’ll own it end to end and become the connective tissue between engineering, HR, legal, sales, our auditors, and our customers.\nSecurity and compliance have been part of how we build from the start, because our customers place their trust in us every day and we support employees in some of their most important financial decisions. We’re HIPAA-regulated and SOC 2 Type II certified, and our customers’ security teams review us closely before every deal.\nThis is a high-visibility, high-impact role at the center of how Pasito runs. You’ll touch everything from how a new hire gets their laptop on day one, to how we message employees by SMS and email in compliance with U.S. law, to how fast we close a critical vulnerability. This is a senior hire by design: you’ve already run a security and compliance program, and you can pick this one up and run it largely on your own from day one.\nWhat You’ll Do\nIT, Access & Device Management\nDirect Pasito’s complete IT footprint, including domain management, Google Workspace, and our broader platform portfolio.\n\nOversee identity and permission governance: SSO, MFA, role-based controls, least-privilege architecture, and routine quarterly reviews.\n\nLead team onboarding and offboarding procedures, ensuring immediate provision of system access for new joiners and instant revocation upon departure.\n\nSupervise organizational hardware via our MDM solution, handling enrollment, encryption protocols, patching cycles, endpoint protection, and inventory logging.\n\nAct as the primary point of contact for internal IT issues and access requests.\n\nSecurity & Compliance Program\nVanta: Maintain daily operations within Vanta by resolving failing tests, delegating fixes, keeping audit trails current, and eliminating operational backlogs.\n\nSOC 2 Type II: Manage the annual audit execution, from gathering documentation to control mapping and liaison with external auditing teams.\n\nHIPAA: Ensure continuous alignment with HIPAA regulations, managing executed BAAs and operational policy frameworks.\n\nPenetration testing: Facilitate yearly security evaluations from partner selection through remediation, validation, and package preparation for clients.\n\nVendor & subprocessor risk: Conduct thorough security evaluations of third-party vendors including AI, payroll, and HRIS tools, managing associated DPAs, BAAs, and public records.\n\nProgram hygiene: Drive policy updates, risk reviews, security training, and the upkeep of our internal trust resource hubs.\n\nAI security: Establish AI risk governance models and monitor third-party artificial intelligence platform integration.\n\nLegal & Risk Partnership\nWork closely with legal advisors to identify, analyze, and minimize potential security and compliance exposures across the organization.\n\nMaintain an active risk log, offering transparent and consistent updates on organizational security posture to leadership.\n\nCollaborate with leadership to ensure security and compliance as product expands and identify risks.\n\nEngineering Remediation & Project Management\nPartner with software engineering teams to resolve vulnerabilities, audit items, and testing findings with clear accountability and timelines.\n\nLead operational security projects across departments, managing roadmaps, dependencies, and deliverables.\n\nDirect our sales security response process, completing SIG, CAIQ, and custom client questionnaires while connecting complex queries to technical leads to keep pipeline moving.\n\nPeople & HR Partnership\nCoordinate with HR on security-adjacent personnel operations, including background verifications, policy sign-offs, team security training, and lifecycle checklists.\n\nHelp foster a security-focused culture by offering clear, practical, and actionable advice to the team.\n\nWhat We’re Looking For\n5+ years in security, IT, or GRC, including personally owning at least one full SOC 2 Type II cycle end to end.\n\nHands-on experience running IT operations at a startup or growth-stage company: identity and access management, SSO, MDM, and SaaS administration.\n\nExperience operating a compliance automation platform in production (Vanta, Drata, or Secureframe).\n\nEnough technical depth to read a pen-test report, judge severity, and work credibly with engineers on remediation.\n\nStrong project-management skills. You keep cross-functional work moving with clear owners and deadlines.\n\nExcellent written and verbal English communication. You can explain risk clearly to engineers, lawyers, executives, and customers.\n\nHighly organized and deadline-driven. Much of this job is time-sensitive and deal-blocking.\n\nBased in Latin America, with strong overlap with U.S. business hours.\n\nNice to Have\nCISA, CISSP, or ISO 27001 Lead Auditor certification.\n\nHealthcare, HIPAA, or benefits/insurance industry experience.\n\nExperience at an early- or growth-stage B2B SaaS company selling to enterprise or regulated buyers.\n\nWhat’s In It For You\nStrategic visibility: Report to the VP of Engineering and work closely with leadership, HR, legal, and sales on decisions that shape how Pasito scales.\n\nOwnership: Build and own the security, IT, and compliance function from the ground up.\n\nGrowth: Join at a pivotal stage and grow as the company scales.\n\nCompetitive compensation: Salary benchmarked to your market, paid in USD.\n\nRemote-first: Work from anywhere in Latin America with a highly collaborative team.\n\nLearning and development: A budget to invest in yourself, whether that’s certifications, courses, books, or conferences.\n\nTeam offsites: We get together in person every year to work, connect, and have fun.\n\nEqual Opportunity\nPasito is proud to be an equal opportunity employer. We believe great teams are built through diversity of background, perspective, and experience, and we’re committed to creating an inclusive environment where everyone can do their best work.\nThe interview process\nSilver Screening Interview\n\nClient Resume Review\n\nClient Screening Interview\n\nClient Technical Interview (You are going to make a presentation and defend it!)\n\nClient Behavioral Interview","description_format":"text","description_chars":7677,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-09T21:45:50Z"}],"visa":[],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":1,"age_days":2,"expected_fill_days":52,"reasons":["conf:1","agency","velocity","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":90000,"is_top_pay":false},"html_url":"https://alion.io/job/silver-dev-pasito-yc-s22-security-it-manager","json_url":"https://alion.io/job/silver-dev-pasito-yc-s22-security-it-manager.json","meta":{"generated_at":"2026-10-13T02:24:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3603,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8709},"rest":"https://alion.io/mcp/rest/get_company?id=8709"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsilver-dev-pasito-yc-s22-security-it-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsilver-dev-pasito-yc-s22-security-it-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsilver-dev-pasito-yc-s22-security-it-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/silver-dev-pasito-yc-s22-security-it-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsilver-dev-pasito-yc-s22-security-it-manager"}]}