Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.
IT / Information Security Analyst II
About the roleBloom Credit is hiring an IT / Information Security Analyst II to own day-to-day IT operations and hands-on security work across a fully remote Mac fleet. This is a combined role: roughly 50/50 IT and IS in theory, with the mix shifting by project and business need.
You will work with strong support from the Head of IT/IS and partner across the entire organization—engineering, compliance, product, people ops, and other functions—as identity, devices, access, and security touch every team. You operate with high autonomy in a remote environment.
We maintain SOC 2 and PCI DSS (self-attested) obligations. Experience supporting audits and evidence collection is valued.
What you'll own (Analyst II)IT operations- Endpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)
- Identity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner–mover–leaver flows
- Google Workspace administration (mail, groups, Drive, Meet) and related automation where useful
- Helpdesk / end-user support: clear triage, resolution, and documentation
- Asset lifecycle coordination (procurement, shipping, disposition) with existing tooling
- Prefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented
- CrowdStrike EDR health, detections, containment, and response coordination
- DLP controls and data-handling practices in daily ops, including policy tuning and exception handling
- SIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)
- Security hygiene: least privilege, access reviews, device posture, exception handling
- Support SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical
- Zero Trust mindset preferred (identity-centric access, device trust, least privilege)—not required if you learn fast in this model
- Endpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)
- Identity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner–mover–leaver flows
- Google Workspace administration (mail, groups, Drive, Meet) and related automation where useful
- Helpdesk / end-user support: clear triage, resolution, and documentation
- Asset lifecycle coordination (procurement, shipping, disposition) with existing tooling
- Prefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented
- CrowdStrike EDR health, detections, containment, and response coordination
- DLP controls and data-handling practices in daily ops, including policy tuning and exception handling
- SIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)
- Security hygiene: least privilege, access reviews, device posture, exception handling
- Support SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical
- Zero Trust mindset preferred (identity-centric access, device trust, least privilege)—not required if you learn fast in this model
No single path is required. Degrees, certifications, and on-the-job experience are weighed equally.
- College - Associate's or bachelor's in IT, cybersecurity, CS, or related—or equivalent practical experience
- Certifications - 1–2 relevant certs (e.g. Security+, Google Workspace Admin, JumpCloud, CrowdStrike, CySA+, GSEC) or equivalent demonstrated depth
- On-the-job - ~4–6 years with ownership beyond ticket-only work; can run identity/endpoint/security ops with light oversight
- Fully remote; no traditional office network—access is identity- and device-centric
- Prefer native vendor integrations, then maintained scripts/automation, then console click-ops when that is the right business case
- High-impact actions require clear scope, blast radius, and rollback thinking; Head of IT/IS approves before execution
- Head of IT/IS available for support, escalation, and prioritization—not day-to-day micromanagement
- Clear, concise written communication across the org
- Calm triage under interruption (helpdesk + security signals)
- Ownership of outcomes without waiting to be told
- Collaborative posture—enable teams, don't gatekeep for its own sake
Similar Jobs at Bloom Credit
Fintech • Financial Services
Own client implementation projects from contract signing through go-live. Build and maintain project plans, track risks and blockers, coordinate internal and client stakeholders, manage communication and expectations, secure required documents and approvals, escalate delays, and improve implementation processes. Serve as the client’s primary point of contact while coordinating technical and account teams without owning technical decisions or commercial relationships.
Top Skills:
APIsB2B Saas
Fintech • Financial Services
Execute Bloom Credit’s B2B marketing engine across ABM, content, social media, events, sales enablement, and digital channels. Manage HubSpot workflows and data hygiene, maintain marketing assets and partner toolkits, coordinate trade shows, webinars, newsletters, and collateral, track competitor activity, reconcile marketing expenses, and report weekly on website, traffic, conversion, and campaign metrics.
Top Skills:
BomboraCanvaFi NavigatorFigmaGoogle AnalyticsHubspot CrmLinkedInLinkedin Sales NavigatorPowerPointPpcSeo
Fintech • Financial Services
Owns Bloom Credit’s production support and incident response function, including monitoring, incident coordination, root cause analysis, documentation, metrics, and preventive improvements. Supports client-facing Operations with onboarding, offboarding, and troubleshooting tasks while automating repetitive workflows using scripts. Partners with engineering, operations, and product teams to improve system reliability, reduce support overhead, and strengthen incident response processes.
Top Skills:
Ai Agentic ToolsBashDatadogPagerdutyPython
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
