IT & Security Lead

As a part of our Operations team, the IT & Security Lead is a generalist role responsible for owning IT across the company. You will look after identity and access management, our SOC 2 compliance, our IT infrastructure and our hardware and devices, keeping the systems behind our work fast, reliable and secure. This role requires meticulous attention to detail, strong communication skills and the kind of self direction that comes from being the person everyone relies on to keep things running.

• Identity and access management across the agency with Okta at the centre, from provisioning new hires to fully revoking access when someone leaves.
• Regular access reviews and enforce single sign on and sensible permission policies so the right people have the right access and no one has more than they need.
• Maintain our SOC 2 compliance by supporting audits, gathering evidence, keeping controls current and ensuring policies are followed rather than just documented.
• Maintain our internal IT infrastructure including servers, network attached storage, networking and wifi, and backup and recovery.
• Keep our systems reliable, integrated and secure.
• Manage vendor relationships and software licenses and renewals.
• Manage the full hardware fleet, from speccing and procuring devices to provisioning, endpoint management and eventual retirement.
• Serve as the first and last line of internal IT support, resolving day to day requests.
• Keep IT and security documentation updated as a dynamic resource for the team.

• 3-5 years of hands-on IT experience, ideally as the primary IT person in a small or mid sized company.
• Degree in Computer Science, Information Technology or similar field (or equivalent professional experience).
• Hands on experience administering Okta or a comparable identity and access management platform.
• Direct experience supporting SOC 2 compliance or a similar framework.
• Strong working knowledge of Google Workspace.
• Experience with endpoint and device management across a Mac heavy fleet.
• Solid understanding of networking, infrastructure and security fundamentals.
• Experience managing vendors, software licenses and renewals.
• Ability to explain complex technical concepts in simple, business friendly terms to non-technical colleagues and leadership.
• Comfort with scripting or automation to reduce repetitive work is desirable although not required.
• Proven ability to manage multiple priorities and drive process improvements.