Compliance & IT Manager

Augmodo is building the 'operating system for the physical shelf.' We use spatial computing and wearable AI to provide real-time, store-level insights that were previously impossible to capture. We are moving fast, and our data needs to move even faster—while remaining hyper-accurate.

About the Role

We are looking for a hands-on Compliance & IT Manager to own and scale our compliance, security, privacy, and IT programs. This role will manage our ongoing SOC 2 compliance, lead preparation for ISO 27001 certification, support GDPR and EU AI Act requirements, and partner closely with Engineering and Infrastructure on security and technology needs.

Key Responsibilities

• Own and maintain the SOC 2 compliance program, including controls, evidence collection, audits, and remediation.

• Lead ISO 27001 certification readiness, including the ISMS, risk assessments, policies, controls, and audit preparation.

• Maintain GDPR, privacy, and EU AI Act documentation and compliance processes.

• Manage system access controls, including employee provisioning, access reviews, and offboarding.

• Own IT equipment provisioning and lifecycle management, including inventory, deployment, recovery, and security.

• Partner with Engineering and Infrastructure on security controls, cloud infrastructure, system documentation, vulnerability management, backups, and incident response.

• Manage security and compliance assessments for vendors and third parties.

• Maintain security, privacy, and IT policies and procedures and ensure they are operationalized across the company.

• Identify compliance and security gaps and work with teams to drive remediation.

• Support internal and external security, privacy, and compliance audits.

• Own the company's IT asset lifecycle, including hardware and software procurement, provisioning, inventory, licensing, renewals, access, security, and deprovisioning.

• Provide general IT helpdesk support to internal employees, troubleshooting common hardware, software, access, and account issues and coordinating escalation when needed.

Qualifications

• 4+ years of experience in compliance, information security, IT, privacy, or a related field.

• Hands-on experience with SOC 2 and preferably ISO 27001.

• Working knowledge of GDPR, privacy, and AI governance, including the EU AI Act.

• Understanding of access management, endpoint security, IT operations, and security fundamentals.

• Comfortable working directly with Engineering and Infrastructure teams.

• Strong organizational and documentation skills.

• Comfortable operating in a fast-paced startup environment and building processes from the ground up.

• Experience with tools such as Vanta, Google Workspace, cloud infrastructure, and/or MDM is a plus.