IT and Security Manager

The IT and Security Manager is the technical lead for Felix's infrastructure, devices and information security. The role keeps the systems our colleagues rely on every day secure, reliable and well supported, from laptops in our offices to the handheld devices and label printers used in our warehouses.

Reporting to the Senior Technology Services Manager, you will lead a small team of two System Administrators. This is a hands-on role: around 70% of your time will be spent on technical work and around 30% on leading and developing the team. You will be Felix's specialist in information security. The Senior Technology Services Manager provides oversight of security, and the Head of Technology, who is Felix's Data Protection Lead, remains accountable for it.

Both will rely on your expertise, judgement and advice to understand risks and make good decisions.

You will work closely with the Service Manager, who owns the service desk and its processes, acting as the technical escalation point for infrastructure, device and security issues. You will join a technology team of around twelve, working alongside colleagues in service management, business applications, data and Dynamics, at a time when the team is strengthening how it delivers technology services and preparing Felix to use AI tools such as Microsoft Copilot safely.

Your normal duties and responsibilities will be set out in your job description.

However, the charity may require you to perform other duties from time to time.

• Manage and maintain Felix's cloud only Microsoft 365 environment, including Entra , Intune, and SharePoint and Teams administration and governance.
• Manage Windows laptops and desktops and rugged Android warehouse devices across their full lifecycle, from purchase and setup through to secure disposal, and help shape Felix's approach to managing Android devices.
• Own the infrastructure Felix's warehouse management system runs on, including handheld devices, label printers and site connectivity.
• Diagnose and troubleshoot network, firewall and connectivity issues across offices and warehouses, raising and following through changes with Felix's managed network supplier.
• Look after telephony, meeting room audio visual equipment, and office and warehouse printing.
• Act as the technical escalation point for infrastructure, device and security issues raised through the service desk, working with the Service Manager, who owns the service desk and its processes.
• Manage and regularly test Microsoft 365 backup, disaster recovery and business continuity arrangements for the systems in your area.

• Set the approach and plan for joiner, mover and leaver processes, volunteer access, shared devices in warehouses and kitchens, and Microsoft 365 licence management, delegating day to day delivery to the System Administrators where appropriate.
• Use Power Automate or other low-code tools to automate routine account and device tasks where it saves time and reduces errors.

• Lead Felix's Cyber Essentials and Cyber Essentials Plus certification, keeping controls and evidence in place all year round.
• Configure and manage Microsoft security tools, including Defender for Endpoint, Defender for Office 365, Conditional Access and multi-factor authentication, and Purview data loss prevention, retention and sensitivity labels.
• Monitor and respond to security alerts, and develop a proper security monitoring framework for Felix.
• Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks.
• Run vulnerability management, including patching and the remediation of findings from penetration tests.
• Run security awareness activity, including phishing simulations and targeted training for colleagues.
• Secure Microsoft 365 for Copilot and other AI tools, managing permissions, reducing oversharing and applying sensitivity labels.
• Plan and implement improvements to security controls, applying recognised frameworks and guidance such as Zero Trust and NCSC guidance, and maintain a security improvement plan for your area.
• Complete security questionnaires from funders, partners and corporate donors.
• Act as the security specialist for the Senior Technology Services Manager, the Head of Technology and the wider team, giving clear advice on risks and how to manage them.
• Provide technical support to the Data Protection Lead, including…