Vice President of IT and Security

About Karbon

Karbon leads globally as an AI-driven practice management software provider tailored for accounting firms. Our acclaimed cloud platform supports tens of thousands of accounting professionals worldwide in enhancing efficiency and collaboration daily. Operating across multiple countries including the US, Australia, New Zealand, Canada, the UK, and the Philippines, Karbon maintains a distributed workforce. We are financially stable, top-rated on G2, expanding swiftly, and hold recognitions for our people-first culture including Great Place To Work® certification and Fortune magazine's Best Small Workplaces™ honors.

Role Overview

This key leadership opportunity involves spearheading Karbon’s IT and Security initiatives. As VP of IT and Security, you will oversee the domains of Internal IT, Security, Governance, Risk & Compliance, along with Enterprise incident response, business continuity, and disaster recovery. Reporting directly to the CEO, you will collaborate closely with teams across Engineering, Finance, Legal, and other senior executives.

You will take charge of a current small Security Operations team from day one. This position represents a new function within the company, demanding you to architect and lead the transition of IT services from an external Managed Service Provider (MSP) model to an in-house capability.

Key Responsibilities

• Manage daily operations of Karbon’s device ecosystem and internal systems.
• Implement and supervise IT service delivery processes—including helpdesk, incident and problem management, and SLA enforcement—throughout the MSP to internal team transition.
• Control identity and access management (primarily using Okta), overseeing device provisioning plus onboarding and offboarding procedures.
• Administer endpoint management (MDM) along with device policy enforcement globally across PC and Mac fleets.
• Develop and maintain vendor partnerships, including contract oversight, renewals, and performance evaluations.
• Optimize licensing expenditure and costs where possible.
• Define and lead organization-wide security policies, standards, and strategy.
• Manage internal security tooling, including Endpoint Detection and Response (EDR), Security Information and Event Management (SIEM), and email security systems.
• Head the Application Security team.
• Maintain information security and risk management frameworks.
• Oversee the Risk Register and coordinate the SOC 2 compliance program end to end—ensuring audit readiness, designing controls, and managing auditor relations.
• Act as the internal authority on compliance relevant to customer, partner, and enterprise sales discussions.
• Direct the incident response plan and playbooks, establishing protocols for severity, escalation, and communication in coordination with legal, insurance, and regulatory bodies.
• Maintain business continuity planning and backup strategies.

Qualifications and Experience

• Minimum of 12 years in IT and security roles, including at least 5 years in senior leadership positions.
• Demonstrable success managing or founding internal IT departments, particularly transitioning from MSP-based services.
• Proven operational and hands-on security expertise capable of supporting teams and managing technical challenges.
• Strong knowledge of compliance frameworks such as SOC 2.
• Experience within B2B SaaS industries is highly valued.
• Technical familiarity with identity and access management tools (Okta and Entra preferred), mobile/endpoint management, EDR technologies (e.g., Jamf Protect, Microsoft Defender for Endpoint), major cloud platforms (Azure, AWS, or GCP), Google Workspace or Office 365, and Netskope is advantageous.

Skills and Personal Attributes

• Ability to seamlessly switch between setting strategic direction and hands-on execution.
• Excellent communication skills, able to simplify complex technical subjects for leadership, board members, or clients.
• Commercial insight weighing security and compliance impact on sales, trust, and product development speed.
• Adaptability in ambiguous environments still defining their processes.
• Collaborative nature paired with assertiveness when required.

Why Join Karbon?

• Exposure to global operations including Australia, New Zealand, UK, and Canada.
• Generous benefits such as flexible time off with encouragement to take four weeks annually.
• Comprehensive health coverage for employees and eligible family members including medical, dental, and vision.
• 401(k) plan with company match and flexible spending accounts.
• Up to eight weeks paid parental leave.
• Home office stipend support.
• Opportunity to collaborate with an elite, experienced team.
• A supportive, diverse, and development-focused culture emphasizing internal advancement.

Compensation

The estimated base salary range for this role is between 220000 and 245000 USD annually. This figure is influenced by factors like location, experience, skills, and company needs. Total compensation may include bonuses, equity, and other extensive benefits. Notes on salary transparency and the company’s commitment to quality recruitment are included.

Diversity and Inclusion

Karbon fosters an inclusive environment, encouraging applications from individuals who may not meet every listed qualification but possess potential. Hiring decisions are based on capability and merit without discrimination. Accommodations in recruitment and career progression are available upon request.

Note

At this stage, Karbon does not accept agency referrals for this position and communicates only through company email domains.