Director of IT & Security

About Moxxi Digital

Moxxi Digital is a New York-based, profitable startup revolutionizing performance marketing through advanced technology and data-driven approaches. Our team boasts seasoned professionals from global corporations and fast-growing startups, dedicated to delivering scalable, profitable outcomes via innovative profiling and continuous optimization. Joining Moxxi offers a dynamic environment to enhance your career and contribute to the future of digital marketing.

Role Overview

We are seeking a Director of IT & Security responsible for the comprehensive management of internal technology systems, access controls, security, and infrastructure. Reporting directly to the Head of Engineering, this leadership position demands oversight of day-to-day operations, strategic planning, and ownership of internal technology spanning multiple entities and platforms.

Key Responsibilities

• Manage administration and lifecycle processes for core applications including Microsoft 365, Google Workspace, Slack, Linear, Jira, Zendesk, and AI tools like Cursor, ChatGPT, and Claude.
• Lead onboarding and offboarding processes ensuring timely and secure provisioning and revocation of access across all systems and entities.
• Oversee vendor relationships, licensing agreements, subscriptions, and expenditure to optimize spend and identify consolidation opportunities.
• Serve as a point of escalation for IT issues, resolving problems and implementing processes and automation to minimize recurring incidents.
• Control identity and access management across multiple entities and tenants, including credential and secrets management with secure rotation and revocation policies.
• Administer user access for proprietary platforms, progressing towards role-based access control systems.
• Develop and implement the target-state architecture for identity and access management portfolio-wide.
• Maintain security baselines across identity systems, multi-factor authentication, single sign-on, endpoint protection, access reviews, and vendor risk assessments.
• Establish guidelines for AI tool usage, data handling, tenant configuration, and data retention policies.
• Manage the security of office network infrastructure, adapting through hands-on management or coordination with vendors as work patterns evolve.
• Lead cyber threat defenses including phishing mitigation, account compromise response, and incident preparedness.
• Ensure corporate domain integrity via email authentication methods (SPF, DKIM, DMARC) and secure registrar and DNS management.
• Collaborate with engineering on domain architecture and operational processes with a security and operational perspective.
• Define and enforce practical security policies and standards suitable for a rapidly moving company, fostering security awareness organization-wide.
• Oversee corporate information management involving file structure, sharing practices, governance, backups, business continuity, and disaster recovery assurance.

Required Qualifications

• Over 6 years of experience in IT, systems administration, or IT operations, with at least 3 years leading comprehensive IT functions in a scaling organization rather than a single-role environment.
• Proven expertise in administrating modern SaaS environments including Microsoft 365, Google Workspace, Slack, with strong identity and access control capabilities.
• Solid understanding of security essentials encompassing identity, network, endpoints, and access management with the ability to prioritize effectively.
• Competent with DNS and email security protocols such as SPF, DKIM, and DMARC to maintain trusted corporate domains.
• Familiarity and daily practical use of advanced AI tools and large language models to enhance automation, troubleshooting, and learning.
• Technical versatility including scripting and automation skills or a strong motivation to develop such competencies rapidly.
• Demonstrated ability to design systems and processes, bringing clarity and order to complex technological environments.
• Ability to manage a changing scope in a growth context with resilience and adaptability.
• Excellent judgment, prioritization skills, and communication ability to clearly articulate technical decisions to non-technical stakeholders.
• Entrepreneurial mindset with action bias, low ego, resourcefulness, and comfort operating in a fast-paced, high-demand setting.

Preferred Qualifications

• Experience managing IT infrastructures spanning multiple companies, entities, or tenants.
• Background in managing access and administration of internal or proprietary applications.
• Knowledge of Mobile Device Management and endpoint management tools like Intune or Jamf.
• Exposure to compliance frameworks such as SOC 2 or ISO 27001 and readiness for audits.
• Relevant industry certifications including Microsoft 365, Google Workspace, CompTIA, or security credentials.

Work Culture and Expectations

• Focus on achieving impactful results over mere output.
• Independent ownership of problems with close coordination with leadership.
• Fast-paced iterative development and learning, leveraging AI for efficiency.
• Encouragement of candid, timely feedback and merit-based idea evaluation.
• Commitment to creating and expanding the IT and Security function with an ownership mindset.

Compensation

The salary for this position ranges from $165,000 to $210,000 annually, commensurate with experience.