ABOUT AWAY
At Away, we design for the reality of travel so you can embrace the journey in full. Launched in 2016 with one thoughtfully designed carry-on, we now offer luggage, accessories, and travel essentials through ecommerce, our retail stores, and wholesale partners. The magic of travel is mirrored in the work we do to bring Away to life, and we invite you to be part of crafting what’s next.
JOIN THE CREW
We are hiring an IT & Security Manager to join our IT & Security team. This position reports to the Director, IT & Information Security and takes Away further by serving as a highly trusted technical anchor for the brand. In this role, you’ll be empowered to shape modern, resilient IT and security practices that directly protect our people, safeguard our assets, and enable our global business to scale seamlessly.
WHAT YOU’LL DO AS THE IT & SECURITY MANAGER
- You'll own and maintain Okta as our central identity provider and system of record for access (SSO/SCIM, RBAC, and JML) across global entities and retail
- You’ll design and manage automated lifecycle workflows and access reviews via Okta Workflows and Rippling integrations to ensure continuous data integrity
- You'll strengthen authentication with phishing-resistant MFA, privileged access hardening, and device-based conditional access
- You'll own the day-to-day execution of the information security program by driving the end-to-end vulnerability management lifecycle, partnering with our outsourced SOC to lead security incident triage and escalation, enforcing access-linked security awareness training, and tracking operational risk posture against functional benchmarks
- You'll protect data in our collaboration platforms through SaaS backup and restore testing, OAuth and integration governance, retention and legal hold, and tiered DLP
- You'll review new AI and SaaS tools for security and data handling, and keep contractors in a managed virtual desktop environment
- You'll govern our enterprise AI platforms, including seats, access tiers, token and API security, and spend, and lead fleet-wide rollout of AI client apps with the IT Operations Engineer
- You'll run Service Management as a product that Logistics, Retail Ops, and other teams manage themselves, supported by SLAs, metrics, and documentation
- You'll serve as the primary IT partner for People & Culture, Retail Ops, and Logistics, leading site-based IT implementations and cross-functional projects from inception to completion
WHO YOU ARE
- You have a minimum of 4 years of experience in information security operations, identity & access management, or IT operations with a security mandate, including ownership of an identity provider (Okta or equivalent) across multiple entities or locations; Okta Certified Administrator certification or equivalent is highly preferred, but not required
- You have a proven track record of independently managing identity infrastructure (Okta enterprise-scale) and driving cross-functional technical projects end-to-end with moderate guidance
- You've managed an identity provider (Rippling, Okta, Entra, or similar) and reconciled data across systems with discipline, planning for downstream impact before cutover. You've built automations with Okta Workflows or a comparable tool
- You know data protection tooling (DLP or CASB, SaaS backup, ransomware recovery), have tested a restore, have run vulnerability management and remediation tracking, and can map operational work to a recognized security framework
- You've administered an enterprise AI platform (e.g., Claude, ChatGPT), managing access, usage, and spend, and know endpoint management well enough to partner on fleet-wide deployments
- You've administered a service-management platform (Jira Service Management or equivalent), including permissions, workflows, and multi-team rollout
- You're comfortable owning ambiguous, cross-departmental projects from scoping through close-out with minimal oversight
- You communicate clearly in…