IT & Security Manager

Punch & Associates Investment Management, Inc. is a Minneapolis-based, independent wealth and investment management firm serving a select number of institutions and families of substantial wealth. Our mission is to enable families and institutions to steward resources with clarity and purpose.

We are looking for a hands-on, service-oriented IT & Security Manager to support the internal employee day-to-day technology experience at Punch.

This person will be our firm's primary point of contact for technology — responsible for user support, Microsoft 365 administration, and supporting our cyber security initiatives — working alongside our outsourced IT partner, who will continue to manage our network and servers. You will report to the Director of Technology, who leads technology strategy.

This is a player-coach role at a 36-person firm. We are a small team, and part of every week is spent solving problems for people who do not think about technology the way you do. The ideal candidate brings well-rounded experience spanning technology support, administration, and security, an ability to move between solving immediate problems and improving the system behind it, a genuine interest in owning technology across the broader Punch organization, and exceptional interpersonal and communication skills

• Serve as the firm's primary point of contact for day-to-day technology support
• Implement and manage a ticketing and intake process, with clear response expectations and visibility
• Own employee onboarding — device setup, account provisioning, access assignment
• Support conference room AV and hybrid meeting technology so that client and internal meetings run without friction
• Train and enable employees to maximize the use and functionality of the tools we already own

• Administer our Microsoft 365 environment — Exchange and Outlook, Teams, SharePoint, and Entra
• Own identity and access management across the firm: security groups, permissions, MFA, and conditional access policies
• Bring intentionality to our configuration — document why policies exist, retire what we no longer need, and replace inherited defaults with decisions
• Manage software and license inventory, optimizing spend and eliminating unused seats
• Conduct periodic access reviews across firm systems

• Co-own and drive remediation of findings from the firm’s third-party information security assessment, tracking progress and reporting to the Director of Technology
• Administer and co-manage our security stack, including endpoint protection and detection, application control, email security, and email encryption
• Co-own our security awareness program, building phishing simulations and training relevant to a wealth management firm
• Support the firm's incident response program, partnering with the Director of Technology and our Compliance Officer
• Work closely with our outsourced infrastructure partner, coordinating priorities and ensuring work is tracked through to completion
• Build and maintain a complete inventory of hardware, software, and SaaS subscriptions
• Develop a hardware lifecycle and refresh plan, and make purchasing recommendations to the Director of Technology

• Document our environment — configurations and standard procedures — so that firm knowledge is shared rather than held by one person
• Establish practical change management for firm systems
• Support technology projects and implementations from planning through rollout
• Contribute to business continuity and disaster recovery planning

• Serve as the firm's primary point of contact…