IT Manager, Corporate Technology

Alloy is where you belong!

Alloy helps solve the identity risk problem for companies that offer financial products by enabling them to outpace fraud and confidently serve more people around the world. Over 600 of the world’s largest financial institutions and fintechs turn to Alloy to take control of fraud, credit, and compliance risk, and grow with the clearest picture of their customers.

Through our values: Be Bold, Get Scrappy, Collaborate, and Celebrate Our Differences, we are creating a workplace where you can grow, thrive, and belong. See how we’ve been continuously recognized and named one of Inc. Magazine’s Best Workplaces, Forbes America’s Best Startup Employers, Best Fintech to Work for by American Banker, year after year.

Check out our investors and read more about us here.

About the team

We are looking for an IT Manager to own and secure the technologies that enable our team to do their best work. This role is a part of the Security Operations team at Alloy, which is a dynamic team responsible for managing and improving the company's IT and corporate security by implementing robust security protocols, ensuring proper data governance, maintaining reliable IT systems, and providing the appropriate level of access to tools and data for authorized users. 

The team is also responsible for supporting the business continuity of the organization as it pertains to the Alloy HQ office and network, hardware and equipment, software and SaaS solutions.This role is positioned as a critical area of expertise for various technology domains such as network and systems engineering, collaboration platforms, identity management, and support. Our ideal candidate has broad technical expertise and a track record of leading teams through strategic projects successfully. You’ll work on developing and maintaining relationships with our vendors, while ensuring smooth, secure, consistently up-to-date technical operations that serve Alloy’s business needs.

What you'll be doing

As the IT Manager you’ll:

• Lead and develop a small IT and security operations team. Provide mentorship, manage workload, and support career growth.
• Serve as an escalation point for complex technical issues, guiding junior members toward effective resolutions.
• Manage and optimize use of security and endpoint tooling such as CrowdStrike Falcon, Okta, Google Workspace, email security, DLP, and more.
• Ensure seamless integration of security tools with SIEM systems for centralized monitoring and incident detection.
• Maintain a culture aligned with providing an outstanding technology experience for our employees.
• Own access management processes, including secure onboarding/offboarding, enforcing the Principle of Least Privilege, and conducting privileged access reviews.
• Oversee the lifecycle of SaaS subscriptions—classification, security settings, and risk assessments.
• Maintain accurate inventory and asset management for all company-provided devices and equipment, ensuring secure configurations and patch management.
• Support and lead response efforts for security incidents involving corporate networks, endpoints, users, email, and SaaS applications.
• Continuously refine incident response processes, coordinating with other Infrastructure and Security teams.
• Collaborate closely with Legal, Compliance, Engineering, and PeopleOps to drive security policies, controls, and audit/compliance requirements (e.g., SOC 2, ISO 27001).
• Identify and manage relationships with strategic service providers, negotiating contracts and renewals.
• Contribute to and enhance programs for endpoint management, DLP, insider threat detection, and secure communications.
• Oversee physical/office and network security at Alloy HQ.

Who we’re looking for

• 8+ years of experience in IT, Security Operations, or related roles at high-growth tech companies (fintech or SaaS strongly preferred).
• 2+ years of people management or technical team leadership experience.
• Hands-on experience with security and infrastructure tools (e.g., Okta, Google Workspace, CrowdStrike Falcon, TPAM, email security platforms).
• Solid understanding of IAM principles, endpoint security, DLP, and security monitoring.
• Familiarity with compliance frameworks (e.g., ISO 27001, SOC 2) and how they apply to operational security controls.
• Proven background in net