Senior IT Compliance Manager

Company Description

Givebutter is the most-loved nonprofit fundraising and CRM platform, empowering millions of changemakers to raise more, pay less, and give better. Nonprofits use Givebutter to replace multiple tools so they can launch fundraisers and events, use donation forms and donor management (CRM), send emails and text blasts—all in one place. Use of the Givebutter platform is completely free with a 100% transparent tip-or-fee model.

Givebutter has been certified as a Great Place to Work® every year since 2021, and is the #1 rated nonprofit software company on G2 across multiple categories.

Our mission is to empower the changemaker in all of us. We believe giving should be fun, so you’ll want to do it again, and we also believe that work should be fun, so that you’ll have the greatest impact. We are excited to hear from talented people who want to work with other talented people in making the world a butter place—and have fun along the way. 

Role Description

We're looking for a hands-on, solutions-oriented Senior IT & Business Continuity Manager to own Givebutter's IT operations and compliance program and become a true operational partner across the business. As our first in-house IT hire, you'll report to our VP of Engineering and work closely with our Sr. Platform Engineering Manager), and our Chief of Staff and our People team to ensure every Butter Slice has the tools, access, and support they need to do their best work.

This role has a clear scope: approximately 70% IT operations (device management, SaaS administration, identity lifecycle, onboarding/offboarding) and 30% GRC and compliance project management. We're also hiring a dedicated Security Engineer who will own the technical security posture of our production systems — cloud infrastructure hardening, fraud prevention, and incident response. Your lane is the IT and GRC layer: keeping the business tooled up, access controls clean, and our compliance certifications (SOC 2, ISO 27001, and PCI) moving forward through Vanta, our GRC platform.

We want to hear from people who…

• Take ownership and love building from zero. You’re energized by creating structure where none exists and setting a strong foundation for scale.

• Are deeply curious and proactive. You don’t wait for problems to surface; you anticipate needs and continuously improve systems and processes.

• Balance security with usability. You care about protecting the business but also understand how to keep tools fast, accessible, and frictionless for teammates.

• Communicate clearly and empathetically. You can translate technical concepts into plain language and build trust across all levels of the company.

• Embrace new technology thoughtfully, especially AI, and are excited to help teams adopt tools responsibly while maximizing their impact.

• Can meet anyone where they are whether you're talking to an engineer or an account executive, you make the technical stuff land.

Responsibilities

• Own all IT operations end-to-end: device procurement & management, SaaS administration, and identity & access management.

• Administer our Mobile Device Management (MDM) platform and maintain a healthy, secure fleet of Mac and Windows devices.

• Manage core business tools like Google Workspace, Slack, Notion, 1Password, and more — and evaluate new ones as we grow.

• Lead IT onboarding and offboarding so every new hire has a great Day 1 (and every departure is handled cleanly).

• Own our Notion workspace as a core IT system: manage permissions and access controls, maintain structural integrity as we scale, and partner with teams to ensure it stays organized, useful, and secure.

• Stay ahead of AI tooling: evaluate, pilot, and govern AI tools across the business, establish guardrails for responsible use, manage access, and help teammates get the most out of tools like Claude, Cursor, ChatGPT, and others as they enter our stack.

• Build and maintain IT documentation and self-service resources that actually empower teammates to help themselves.

• Implement and maintain IT security fundamentals in close partnership with the Security Engineer: endpoint protection, MFA enforcement, and access controls — you own the IT and SaaS layer; the Security Engineer owns the production and cloud security layer.

• Own Vanta, our GRC platform — manage our compliance posture, track controls, coordinate evidence collection, and project manage our SOC 2, ISO 27001, and PCI certification programs end-to-end.

• Manage our current third-party IT partner (Mann) while building toward transitioning support in-house over time.

• Serve as the go-to for troubleshooting and support, not as a ticket-closer, but as a genuine partner to the team.

• Think proactively: identify gaps before they become problems and build the infrastructure for where we're going, not just where we are.

Requirements

• 5+ years of IT experience, ideally at a high-growth startup or remote-first SaaS or fintech company.

• Proven ability to build from scratch — you don't need a playbook to get started, and you know how to prioritize in ambiguous environments.

• Hands-on experience with a GRC tool — Vanta strongly preferred; Drata or similar is acceptable. You've project-managed a compliance audit, not just supported one.

• Familiarity with SOC 2 and at least one of ISO 27001 or PCI DSS — the three certifications we're targeting over the next year or two.

• Strong project management instincts — you know how to keep a compliance program on track without it becoming a fire drill at audit time.

• Hands-on experience administering Notion at scale — including permissions management, workspace governance, and working cross-functionally to keep it structured and useful.

• Familiarity with AI tools and how they're being adopted in the workplace — you understand the productivity upside and the security/compliance considerations that come with them.

• Strong communicator who can translate technical concepts without making anyone feel out of the loop.

• Security-minded and pragmatic — you understand the tradeoffs and make smart, practical decisions (note: deep technical security expertise lives with the Security Engineer; this role partners, not leads, on that front).

• Experience managing a Mac-heavy, fully remote team and the SaaS stack that comes with it.

• Someone who genuinely cares about the people they support, not just the tickets they close.

More about Givebutter

Benefits

• Remote Work: Work remotely from one of our 10 hubs (Austin, Denver, Indianapolis, Los Angeles, San Francisco, New York, Salt Lake City, Minneapolis, Seattle, and Nashville).

• Health Insurance: We offer Medical, Dental, and Vision insurance covered 100% for employees as well as HSA and FSA accounts.

• Dependent Care Coverage: We offer coverage for dependents, with 50% of Medical, Dental, and Vision premiums covered for all eligible dependents.

• Mental Health: Givebutter health insurance plans come with access to a TalkSpace membership.

• 401k: We offer a 3% 401k match for all eligible employee's.

• Vacation and Holidays: Givebutter offers a Flexible PTO policy with uncapped vacation days and company-recognized holidays.

• Wellness Week: Givebutter closes for one week each summer to prioritize rest and recharge for the entire team.

• Parental Leave: We offer 12 weeks of paid leave for all parents and comprehensive leave planning management through Aidora.

• Family Care Support: Access a company-paid UrbanSitter membership plus care credits to book trusted, background-checked caregivers for childcare, senior care, pet care, and household support when you need it most.

• Home Office Stipend: Upgrade your home office with company-sponsored expenses, including high-quality laptops, monitors, and modern technology.

• Coworking Stipend: Enjoy a monthly stipend that gives you the freedom to work from coworking spaces or cafés whenever you need connection, community, or a change of scenery.

• Charitable Giving: Employees are encouraged to donate up to $50/month to any verified nonprofit they wish to support on Givebutter.

• Professional Development: We offer learning and development reimbursement opportunities.

• Love What You Do: We are a mission-driven company serving the charitable sector. Feel good about the work you're doing and the company you work for.

Interview Process

Below is a high-level outline of our standard interview process

1. Recruiter Screen: A 30-minute conversation to learn more about your background, walk through the role, and ensure mutual alignment on expectations, values, and logistics.

2. Hiring Manager Interview: A deeper dive into your relevant experience, skillset, and working style. This is your first opportunity to connect directly with the person who may be your future manager.

3. Assessment (technical or non-technical): This stage will vary based on the role. It could involve a live coding session, case study, or take-home project. Some roles may include two parts to this stage to evaluate both practical skills and problem-solving approaches

4. Values Interview: A conversation with team members focused on how you align with our core values and leadership principles.

5. References: We connect with a few folks you’ve worked closely with to get a better picture of your working style and impact.

6. Offer: If all goes well, we’ll move to the offer stage!

Please note, we will have an AI note-taking tool join most of our interviews.

Hi potential new butterslice! A recent study from LinkedIn showed that most women apply to jobs only when they meet 100% of the requirements, whereas men will hit the apply button if they hit 60%. Givebutter is committed to building a diverse and inclusive team. So to the women and nonbinary folks out there feeling unsure if you're a perfect fit, we strongly encourage you to apply!