IT & Security Lead

A growing, remote-first digital consultancy is looking for an experienced IT and security professional to take ownership of their internal technology environment from the ground up. This is a newly created role, consolidating IT and security responsibilities that have so far been spread across the technical team. You'll become the single point of ownership for internal IT and information security, with a major initial focus on leading the business through ISO 27001 certification.

Ocho have placed over 12 people into this business over the past two-plus years and are showing no signs of slowing down. This is a well-established, trusted relationship with a business that's genuinely scaling. What you'll be doing Owning day-to-day internal IT: device lifecycle management, identity and access administration, SSO/MFA, SaaS platform admin, and IT support across the business Leading endpoint security and EDR, vulnerability and patch management, and incident response coordination Taking the business through ISO 27001 certification from the ground up: building the ISMS, risk register, Statement of Applicability, and control framework, then operating and improving it on an ongoing basis Coordinating internal and external audits, supplier and third-party security assessments, and customer security questionnaires Looking for opportunities to automate IT and security administration rather than relying on manual processes What you'll bring Strong hands-on IT administration experience within a cloud/SaaS-based organisation Practical information security knowledge: IAM, endpoint security, vulnerability management, access reviews A working understanding of ISO 27001 and information security controls (implementation or certification experience a strong plus) Comfort moving between hands-on technical work and security governance, and confidence communicating both to senior stakeholders Scripting experience (Bash, Python, Power Shell or similar) is a bonus, as is exposure to Jump Cloud, Crowd Strike, Atlassian Cloud, Entra /M365, or Google Workspace What's on offer Remote-first, with co-working access in Belfast and London if wanted 25 days annual leave plus bank holidays Pension matched up to 8% Private healthcare and health assessments Share options Training and professional development budget If you're someone who wants to build an internal IT and security function from scratch rather than inherit someone else's mess, this is a genuinely rare one.

Please apply now of contact Andrew Harrison to discuss further.

Skills:

ISO
27001 Jump Cloud Crowd Strike Entra IAM EDR GRC Benefits:
Work From Home