IT Security & Compliance Manager

Job description

About fab2 The fab2 team can build anything. We design all the hardware and software needed to make chips and we make the fabs, tools, and components ourselves. We're looking for exceptional, hands-on people who can iterate to the limits of what's possible. fab2 was founded by Sam Zeloof https://www.youtube.com/@SamZeloof and Jim Keller https://en.wikipedia.org/wiki/Jim_Keller_(engineer). Sam is best known for making chips in his garage, and Jim has been a leader in the semiconductor industry for the past 40 years. About the team This role sits on the Business Operations team, which is responsible for building the operational foundation that lets fab2 scale. We believe our internal systems should be as thoughtful and ambitious as the products we build. As we expand across multiple locations, we need to lay down critical IT and security groundwork. You will be the first person dedicated to this effort - setting up the policies, guidebooks, and physical IT infrastructure that will secure our future and set the company up for long-term success. About the role As a Security & IT Operations lead, you will help build the security, IT, and governance foundations that support our fast-moving engineering organization as we scale across new offices, growing teams, and increasingly complex systems. Sitting at the intersection of security operations, systems governance, and IT operations, you will take broad ownership of how Atomic Semi manages access, devices, operational risk, and sensitive information. We’re looking for someone who can operate as both a strategic security lead and a hands-on builder, shaping the systems, policies, and operational rigor that will support fab2 through its next stage of growth. You will know you are successful when you have built a scalable, highly secure foundation from scratch that protects our sensitive data without slowing down our engineering teams. Responsibilities - Own end-to-end change management for security and IT systems, including impact assessment, cross-site coordination, rollout execution, and stakeholder communication. - Develop and maintain foundational operational security policies, acceptable use standards, and data loss prevention strategies from the ground up. - Design and implement scalable processes around permissions management, identity access, and SaaS governance across our growing footprint of multiple locations. - Lead compliance readiness and audit preparation efforts related to critical frameworks (e.g., EAR, ITAR, NIST 800-171, CMMC, SOC 2, etc). - Take ownership of the full employee device and access lifecycle, delivering reliable, high-quality IT support and troubleshooting that keeps our teams productive and our infrastructure running smoothly. - Evaluate new software, services, and operational workflows to identify and proactively remediate security and compliance gaps before they become issues. Required Experience - 5-7+ years of experience in IT operations, security operations, systems governance, GRC, or internal security and IT roles. - Demonstrated experience building operational processes, documentation, and playbooks from scratch in a fast-paced or rapidly growing organization. - Familiarity with export control and government-related compliance environments, particularly EAR, ITAR, NIST 800-171, CMMC, SOC 2, and/or FedRAMP. - Strong practical understanding of identity and access management, permissions auditing, SaaS governance, and endpoint/device management. - Familiarity with IAM, MDM, endpoint management, or SaaS administration platforms. - Proven ability to operate independently, break complex security problems into actionable work, and build structure in highly ambiguous environments. Nice-to-have - Experience acting as an early or foundational security/IT hire at a startup or operationally rigorous environment. - Experience supporting regulated, government-adjacent, or defense technology environments. Working at fab2 We’re an early-stage hardware startup with solid funding, world-class advisors, and a lab/office. Compensation: fab2 is committed to fair and equitable compensation practices. The annual salary range for this role is $140,000 – $170,000. Compensation is determined based on your qualifications and experience. Our total compensation package also includes generous equity in fab2. Benefits: fab2 offers the following benefits, subject to applicable eligibility requirements: - Medical, Dental, and Vision insurance - Generous Paid Time Off inclusive of Holidays and Sick Time - Visa Sponsorship - Life and Disability Insurance - Paid Parental Leave - 401(k) retirement plan - Weekly Learning & Development opportunities - Commuter Benefits including Parking and Late Night Uber rides from the office - Lunches daily, Dinners 3x per week, Stocked Office Kitchen with Snacks and Spindrifts We are an equal-opportunity employer and do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, veteran status, disability or other legally protected statuses. Export Control Analysis: This position involves access to technology that is subject to U.S. export controls. Any job offer made will be contingent upon the applicant’s capacity to serve in compliance with U.S. export controls. fab2, formerly known as Atomic Semi