SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Pencil is an AI-powered advertising technology company on a mission to democratize content creation for brands of all sizes. We're seeking a Security & Trust Specialist to join our growing team at a pivotal moment. This is a hands-on, technical role perfect for someone transitioning from IT systems administration or desktop support into a security-focused career.
You'll own day-to-day security operations across our entire tech stack: endpoint management (MDM/Intune), identity and access management, cloud security, and SaaS administration. Your responsibilities include administering and securing endpoints with patching and encryption; managing joiner/mover/leaver processes and access reviews across Google Workspace, Microsoft 365, and GCP; monitoring security alerts and investigating incidents; supporting SOC 2, ISO 27001, and ISO 42001 compliance evidence collection in Vanta; and helping gather evidence for vendor and customer security questionnaires.
You'll work directly with our Head of Security & Trust, who will mentor your growth into audit, compliance, and vendor-risk management over time. The role blends strategic security work with practical IT support—you're comfortable switching between security projects and helping colleagues with device issues.
Ideal candidates have a background in desktop support or IT systems administration, hands-on experience with endpoint management (Intune or similar) and cloud platforms (GCP, AWS, or Azure), familiarity with Google Workspace or Microsoft 365, and ideally a security certification (CompTIA Security+, ISC2 Certified in Cybersecurity, or Microsoft SC-900). Some exposure to compliance tools like Vanta is a bonus. You're self-directed, genuinely helpful, eager to grow in security, and able to explain technical concepts simply to non-technical colleagues.
Success is measured by completing access reviews and joiner/mover/leaver tasks within SLA with zero audit findings, maintaining high endpoint compliance rates, closing security incidents and IT issues promptly, and providing quality evidence for compliance and vendor reviews.
