Senior Manager, Information Technology and Cybersecurity

About Sparkfund

Sparkfund is the deployment services company utilities rely on to take DERs from grid edge to grid core.

With over a decade of experience as a utility services company, Sparkfund has pioneered a smarter approach to deploying distributed assets as part of a fast-growing grid. Through its Distributed Capacity Procurement (DCP) model, Sparkfund enables utilities to plan, deploy, and dispatch DERs at the scale and pace necessary to meet load growth demand and unlock the full value of the grid. We support program design, assessment of DER grid value, host engagement, and value chain management to ensure on-time, on-budget deployment of distributed resources with maximum grid value and lowest cost.

With more than 3,500 projects deployed across 43 states and more than 300MW of energized assets constructed, Sparkfund is transforming buildings into a valuable extension of the grid for the benefit of our society.

Role Summary 

Sparkfund is seeking a hands-on Senior Manager of IT & Cybersecurity to build, operate, and mature our internal IT and security environment end-to-end. This role owns the day-to-day administration of core IT systems, cybersecurity tooling, onboarding/offboarding workflows, and SOC 2 readiness efforts while shaping the processes and controls needed for a growing remote-first company operating across regulated environments. 

This is a senior individual contributor role for a builder who likes designing and implementing solutions directly, enjoys simplifying imperfect systems, and thrives in environments with autonomy and broad ownership. 

Location and Travel Requirements 

Sparkfund is a remote-first company with a digital workplace built around emerging hub-offices; as a result, this role is flexible on location. There will be company required travel up to 5% of the time, including meetings within the Minneapolis, Denver, and Washington, DC areas as well as meetings in other parts of the continental US, to be determined. These meetings may include visits to utility customer offices and project sites as well as scheduled team and company gatherings to collaborate with other members of the team / company, learn the ins and outs of our business, and contribute to our company culture. 

 

Key Responsibilities  

IT & Security Strategy & Roadmap Ownership 

• Own and maintain the IT and Security roadmap aligned to business needs, SOC 2 expectations, and customer requirements 

• Prioritize and sequence investments across identity, devices, endpoint protection, SOC 2 controls, and collaboration tooling 

• Define and communicate IT and Security standards, policies, and architectural decisions 

• Partner with leadership to develop budget forecasts and resourcing plans for IT and cybersecurity 

• Identify operational and compliance risks and propose mitigation strategies and tradeoffs 

IT Operations & Tooling 

• Administer collaboration and identity platforms (Google Workspace, Microsoft 365, Slack, IAM, MDM, endpoint protection, etc.) 

• Configure and manage onboarding/offboarding workflows and IT provisioning 

• Implement and maintain IT helpdesk processes (low-volume) 

• Support vendor evaluations, integrations, and continuous improvements across the IT stack 

• Maintain secure device and access management across remote environments 

Security & Compliance Operations 

• Execute SOC 2 readiness and evidence collection in partnership with external consultants 

• Maintain IT and security policies, documentation, and control evidence 

• Coordinate responses to client security questionnaires and due diligence requests 

• Support vendor risk management and access control processes 

• Monitor and support incident response workflows in collaboration with leadership and vendors 

Project Implementation