IT & Compliance Manager
Core
Own Duve's internal IT environment and lead security, privacy, and compliance operations for a hospitality tech platform.
Role type
Senior IC IT & Compliance Manager
Builds
Secure, scalable, and audit-ready internal IT systems and compliance programs
Domain
Hospitality technology, Information Security, GRC
Required skills
SOC 2/ISO 27001 audit leadership, Identity and endpoint management, AWS security fundamentals, GDPR/privacy operations, Security policy creation, End-to-end process ownership
Preferred skills
Compliance automation platforms, ISO 27701/PCI DSS/NIST CSF, Kubernetes/CI/CD security, Scripting/automation
Technologies
JumpCloud, Okta, Google Workspace, Entra ID, AWS, Vanta, Drata, Kubernetes (via careerplan.io/jobs/58-00D-88-37A-it-compliance-manager-at-duve)
Responsibilities
Lead compliance and certification activities across SOC 2, ISO 27001, ISO 27701, PCI DSS, and GDPR; Manage external audits end-to-end; Manage identity, access, and endpoint operations; Own core IT operations including asset management and device security; Manage privacy processes including data inventory and DSRs; Manage third-party and vendor security risk; Coordinate security incident response and vulnerability management; Partner with R&D and DevOps on security controls; Identify opportunities to automate IT and compliance processes
Seniority
Senior, hands-on IC
