IT & Business Systems Administrator

The Opportunity:

Data privacy has become one of the most strategic challenges facing modern enterprises — sitting at the intersection of AI governance, data operations, and customer trust. As companies adopt AI at scale, they need new ways to automate privacy and manage risk without slowing innovation. DataGrail has launched the first agentic privacy platform, and we're entering a pivotal phase of growth as we scale toward the next stage of the business.

As IT & Business Systems Administrator you’ll be in charge of IT and business systems for our remote-first team, including endpoints, identity, and our SaaS applications. In this individual contributor role you’ll have the opportunity to shape the tools and systems every employee at DataGrail relies on. You’ll be the face of technology for our employees, the person they call first, and the person building the automated, self-service systems that let us scale without scaling manual support. You’ll report to the VP of Engineering and have real autonomy to shape how the function runs.

You’ll also partner closely with Security on the controls we need for ISO compliance, working hands-on with our security engineer across day-to-day workstreams. You’ll build the automated, self-service systems and audit-ready controls that keep IT running smoothly as DataGrail grows.

What You'll Do:

• Be responsible for IT and business systems for our remote workforce, including endpoint management, identity, and the SaaS application footprint.

• Deliver hands-on support across the company, resolving issues at the desktop level and setting the standard for first-call resolution.

• Run onboarding and offboarding for devices and accounts, so new hires are ready on day one and access is fully removed when people leave.

• Administer our Apple fleet end to end, from MDM policy and OS upgrades to hardware lifecycle.

• Build automation and self-service tooling that reduces manual ticket volume while keeping strong controls and visibility.

• Partner with Security on the access controls, endpoint policies, and audit trails required for ISO compliance, and work alongside our security engineer on tooling rollouts and access reviews.

• Manage vendor relationships and our SaaS vendor process, keeping records accurate and renewals reviewed monthly so spend goes toward the right long-term solutions.

• Partner across teams to understand IT needs, align on priorities, and build systems that make it easy for colleagues to self-serve.

What You'll Bring

• Experience independently administering a distributed, remote-first IT environment, spanning endpoints, identity, and business applications.

• A track record of setting direction for a function and making sound judgment calls with minimal day-to-day oversight.

• Hands-on experience administering MDM platforms (such as Kandji, Jamf, or Hexnode) and Apple hardware and OS in an enterprise setting.

• Strong understanding of identity and access management tools like Okta, and how they intersect with security and compliance requirements.

• Experience building or maturing security and compliance controls, such as endpoint compliance or access reviews, ideally in support of a framework like ISO 27001.

• Comfort working alongside a security engineer on shared initiatives, including vulnerability remediation, tooling rollouts, and access reviews.

• A track record of automating manual IT workflows with scripting or self-service tooling, including Python and AI tools like Claude Code.

• Experience managing IT vendor relationships and technology spend through a formal vendor management process.

• Clear written and verbal communication, including the ability to explain technical issues to non-technical colleagues.

•

Bonus Points

• ISO 27001 (or similar framework) certification, or direct experience supporting an ISO audit.

• Prior IT experience in a regulated industry or at a SaaS company handling sensitive data.

What Success Looks Like

Within 90 Days You'll:

• Point of contact for the helpdesk queue, resolving issues at the desktop level and setting the standard for fast, first-call resolution.

• Assess the current state of endpoints, identity, and the SaaS footprint, and turn what you find into a prioritized roadmap for the function.

• Build a complete inventory of applications, owners, and renewal dates, and run your first monthly renewal review.

• Run onboarding and offboarding for every new hire and departure, and find solutions for gaps in the process.

• Review MDM policies, OS patch status, and hardware lifecycle across the Apple fleet, and close any urgent gaps.

Within 180 Days You'll:

• Independently manage endpoint, identity, and access management, with MDM and Okta configurations you’ve reviewed, documented, and improved.

• Put foundational ISO-relevant controls in place, including endpoint compliance baselines, audit trails for provisioning and deprovisioning, and a repeatable access review process.

• Complete your first full access review cycle with the security engineer and remediate the findings.

• Launch automation and self-service tools, such as automated provisioning or common employee requests, and show a clear drop in repetitive tickets.

• Act as an active hands-on partner to the security engineer, delivering tooling rollouts and vulnerability remediation without needing day-to-day direction.

• Conduct and improve our vendor management process th

Within 365 Days You'll:

• Position DataGrail for ISO audit readiness, with controls, evidence, and documentation you maintain..

• Run a mature self-service model where most routine requests are resolved without a ticket, while keeping strong controls and visibility.

• Deliver a largely automated onboarding and offboarding experience, with accounts and devices ready before day one and access fully revoked on exit.

• Manage SaaS and vendor spend on a predictable cadence, using it to guide renewal, consolidation, and retirement decisions.

• Shape the longer-term roadmap for IT and business systems, and make the case for the next investments in tooling as DataGrail scales.

• Document runbooks and processes so the function runs reliably and no single person is the bottleneck.

Please note that the base compensation range below is a guideline and the final compensation will be based on factors such as qualifications, skill level, and competencies. Our compensation ranges apply to all US-based job postings regardless of state.

All full-time regular employees are eligible for equity, health, dental & vision insurance plans, remote-first working environment, 401k savings plan, parental leave, wellness benefits, flexible time off, paid holidays, and a work from home stipend. Benefits are subject to change.

Compensation Range
$130,000 — $175,000 USD

About Us:

DataGrail is the Agentic Data Privacy Platform. We help the world’s leading brands such as HubSpot, FanDuel, Dexcom, Major League Soccer, and Okta automate privacy and control risk with secure, human-governed AI that scales.

Powered by Vera, the complete privacy AI agent, and underpinned by an unrivaled 2,500+ integrations and no-compromise security architecture, DataGrail is built to solve complex privacy challenges that others can't. DataGrail is rated 4.8/5 stars on G2 and is a two-time recognized privacy leader by IDC.

DataGrail provides equal opportunities for everyone that works for us and everyone that applies to join our team, without regard to sex or gender, gender identity, gender expression, age, race, religious creed, color, national origin, ancestry, pregnancy, physical or mental disability, medical condition, genetic information, marital status, sexual orientation, any service, past, present, or future, in the uniformed services of the United States (military or veteran status), or any other consideration protected by federal, state, or local law. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.