IT Operations & Security Manager

IT Operations & Security Manager

We’re seeking an experienced IT Operations & Security Manager / Sr. Manager to lead our infrastructure, cloud, and cybersecurity initiatives. This role combines hands‑on technical management with strategic oversight, ensuring our systems remain reliable, secure, and compliant. You’ll oversee IT operations across on‑premises and cloud environments (GCP), manage a small technical team, and collaborate with business leaders to align technology with organizational goals.

This role also plays a key part in enabling and governing AI capabilities across the organization, including Microsoft Copilot and other AI‑assisted productivity and automation tools—balancing innovation with strong security, privacy, and compliance controls.

• Supervise and mentor IT Helpdesk Technicians and System Administrators.
• Oversee day‑to‑day IT operations, ticketing workflows, and SLAs.
• Foster a culture of accountability, collaboration, and continuous improvement.
• Partner with Legal and the VP of Technology to define and execute the organization’s security, privacy, and AI governance strategy, including CCPA, global privacy, PCI compliance, and data protection initiatives.
• Participate in change management processes and provide infrastructure input.
• Plan and manage IT budgets, vendor relationships, and hardware/software procurement.
• Maintain documentation for systems, procedures, configurations, and AI enablement standards.

• Manage GCP environments, including firewall policies, network configurations, and IAM permissions.
• Automate provisioning and infrastructure lifecycle through Terraform and Bitbucket.
• Administer compute instances, load balancing, routing (BGP), VPNs, and peering.
• Manage access and data security for GCP storage buckets, projects, and folders.
• Oversee hybrid network connectivity between office sites and GCP.
• Monitor performance and health using Solar Winds and related tools.
• Support the secure integration of AI tools and APIs into cloud and enterprise systems, ensuring data classification and access controls are properly applied.

• Manage LAN/WAN architecture, routers, firewalls, switches, and VPNs (Fortigate, Aruba, Extreme).
• Oversee DNS, DHCP, and NPS services, ensuring reliable internal/external resolution.
• Administer wireless networks via Aruba Central.
• Maintain Windows and Linux servers across environments.
• Oversee backups (Veeam), file and print services, and server/storage configurations.
• Manage external DNS platforms (Safenames, DNS Made Easy).
• Support third‑level escalations for infrastructure and application issues.
• Ensure proper integration and security of AI‑based monitoring, automation, and Copilot capabilities across systems.

• Oversee Active Directory, Group Policy, and authentication infrastructure.
• Manage Entra , Intune, and Kandji integrations for identity and device management.
• Administer user and service account permissions across systems.
• Enforce least‑privilege and zero‑trust access policies.
• Implement governance and access controls for AI tools, including Microsoft Copilot, to ensure data protection and responsible use of AI‑assisted features.

• Define, implement, and continuously improve the company’s cybersecurity and compliance program.
• Partner with Legal and the VP of Technology to develop and maintain the enterprise security, privacy, and AI governance strategy, covering CCPA, global privacy, PCI compliance, data security, and responsible AI usage.
• Conduct vendor risk assessments and manage third‑party security reviews, including those for AI‑enabled platforms.
• Lead compliance audits and ensure adherence to internal and external regulatory requirements.
• Develop and enforce cybersecurity standards, governance, and operational controls.
• Lead risk assessments, vulnerability management, and penetration testing.
• Oversee incident response, root‑cause analysis, and threat mitigation.
• Manage certificates, Root CA, and CRL for internal and external systems.
• Maintain and optimize firewall rules, IDS/IPS, and network security configurations.
• Monitor global and…