Company: LHL Strategies, Inc.

Location: Remote (United States), with periodic travel

Reports To: Chief Technology Officer

Department: Technology

About LHL Strategies

Every year, millions of seniors lapse or surrender their life insurance policies for little or no value from their insurance company. Life settlements give them the option to sell the policy instead, for significantly more than they would otherwise receive. The money we pay helps meet retirement needs, healthcare costs, long term care expenses, or whatever else they choose.

Lighthouse Life is part of LHL Strategies, Inc., a group of companies providing vertically integrated services for asset managers who acquire and manage life policies and portfolios. We are the only integrated platform in the industry spanning policy acquisition and trading, valuation, management, and portfolio servicing.

We are a remote-first company, and this role can sit anywhere in the U.S. Our offices are in Conshohocken, Pennsylvania, just outside Philadelphia. We encourage innovation, protect work-life balance, and are driven to exceed expectations.

About the Role

Everyone at LHL depends on the tools this role runs: email, SharePoint, Teams, devices, identity, and the systems that connect them. You will own that environment end to end, and you will own the security and compliance program that protects it.

You will manage our managed service provider (MSP) and hold them to clear service levels, but this is not an oversight-only role. You will be hands-on in the admin consoles every week, configuring, troubleshooting, and fixing things yourself when that is the fastest path. You will set the standards, make the decisions, and be accountable for the outcome.

You will also own our cybersecurity and compliance program, including the written policies and plans that our regulators, partners, and auditors expect, and the evidence that shows we follow them. This role is separate from our software and data engineering teams, and works closely with them on shared security controls.

How We Work

We are remote and distributed, and we operate with high transparency and an ownership mentality. Expect a daily standup, visibility into your work via Teams, and blockers flagged before they become emergencies. What we value:

· Flagging problems early, not after they have become crises

· “How can we improve this?” over “This is how we have always done it”

· Systems thinking: automate and document, do not just execute manually

If you thrive when told exactly what to do and left alone, this is not the role. If you thrive when trusted to own outcomes and keep leadership informed, we want to talk.

Roles and Responsibilities

· Own Microsoft 365 administration: Exchange Online, SharePoint, OneDrive, and Teams, including site and permission design, retention, and licensing

· Own identity and device management in Entra ID and Intune: onboarding and offboarding, MFA and conditional access, device compliance, and regular access reviews

· Manage our MSP: define service levels, review performance and ticket trends, escalate issues, and make sure end users get fast, friendly support

· Run endpoint and email security with Microsoft Defender, and data protection with Microsoft Purview, including data loss prevention, sensitivity labels, and eDiscovery

· Own and maintain our core security and compliance documents, including the Written Information Security Program (WISP), the Incident Response Plan, the Business Continuity and Disaster Recovery Plan, and supporting policies such as acceptable use and access control

· Lead incident response for IT and security events: triage, containment, communication, and post-incident review, and run regular tabletop exercises

· Maintain compliance with HIPAA and state insurance data security requirements, and lead responses to partner security questionnaires, due diligence requests, and audits, including SOC 2 style evidence

· Run the security awareness program, including training and phishing simulations

· Lead technology vendor selection and management: define requirements, run evaluations and RFPs, negotiate contracts and renewals, conduct security reviews, and keep an accurate inventory of systems, software, and licenses

· Support Salesforce user administration, including provisioning, licensing, and access, in partnership with the teams that develop on it

· Own telephony, Zoom, and office AV, and support hardware procurement and lifecycle for a distributed workforce

· Help govern the AI tools our teams use, such as Microsoft Copilot and Claude, so they are adopted safely and within our data policies

· Own backup, recovery, and IT cost, and keep runbooks and documentation current

Desired Skills

Hard Skills

· IT operations. 7 or more years in IT operations or systems administration, including at least 3 years leading IT for a small or mid-sized organization.

· Microsoft 365. Expert administration of Exchange Online, SharePoint, OneDrive, and Teams, including SharePoint information architecture and permissions.

· Identity and devices. Entra ID and Intune: conditional access, MFA, device compliance, Autopilot, and joiner, mover, and leaver processes.

· Security tooling. Microsoft Defender and Purview, email security, endpoint protection, and backup and recovery.

· Security and compliance programs. Writing and maintaining a WISP, incident response plan, and business continuity and disaster recovery plan. Experience with HIPAA, state insurance data security laws modeled on the NAIC Insurance Data Security Model Law, or NY DFS Part 500 is a strong advantage.

· Audits and due diligence. Responding to security questionnaires and audits, and collecting evidence against frameworks such as SOC 2 or NIST CSF.

· Vendor selection and management. Running technology evaluations and RFPs, negotiating contracts, managing an MSP or other outsourced IT providers to defined service levels, and running vendor security reviews.

· Business systems. Salesforce user administration, Zoom and telephony, and office AV.

· AI-assisted operations. You use AI tools to work faster, such as for scripting, documentation, and troubleshooting, and you understand the data risks they introduce.

· Helpful, not required. PowerShell or Microsoft Graph scripting. Certifications such as Microsoft 365 Administrator Expert, CompTIA Security+, CISSP, or CISM. Experience in financial services, insurance, or healthcare.

Soft Skills

· Owner. You treat the environment as yours and take problems off other people’s desks, including the MSP’s.

· Service-minded. You care that people can do their jobs, and you explain technology in plain language.

· Writer. Much of this role is policy and documentation that partners, auditors, and regulators will read. Excellent written and verbal communication skills are required.

· Calm under pressure. When something goes wrong, you take charge, communicate clearly, and follow the plan.

· Pragmatic. A control that is in place and followed beats a perfect policy that sits in a folder.

Education

· Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent practical experience.

Compensation and Benefits

· Base salary: Competitive, commensurate with experience

· Benefits: Comprehensive health, dental, and vision; 401(k); flexible PTO

· Remote work: Remote-first, anywhere in the U.S.

Why Join LHL?

· Impact: Own IT and security for a growing company in an underserved market

· Ownership: Build the security and compliance program, not just maintain it

· Culture: Collaborative, entrepreneurial environment with experienced leadership