• Identity and access: You'll own Microsoft 365 and Entra ID, including Global Admin and break-glass accounts, conditional access, and SSO/SCIM across the SaaS estate. You'll hold privileged and emergency access to critical systems, with documented runbooks so access never depends on one person.
• Devices and endpoints: You'll manage the full lifecycle of laptops and mobiles across three countries: procurement, Intune enrolment and configuration, patching, encryption, asset tracking, secure wipe, disposal and ownership transfer.
• Joiners, movers and leavers: With People and hiring managers, you'll own the JML procedure for employees and contractors. That means access ready before day one, changed when roles change, and removed promptly on exit. You'll also close the gaps in contractor on- and offboarding and keep dormant accounts under control.
• Offices and networks: You'll run IT for our London and Gold Coast, AU office, covering the network, Wi-Fi, firewalls, physical access, meeting rooms, and the relationships with building management and suppliers. For New York and the Gold Coast, you'll set standards, provide remote support and train on-site IT contacts. You may also set up new offices.
• IT support and your team: You'll own the ticket queue, the SLAs and a regular satisfaction survey. You'll line manage and develop our first line IT Support Engineer, and own and improve the AI assistant that handles first-line support in Slack.
• Audit readiness and control translation: We hold ISO 27001, 27017 and 27018, Cyber Essentials Plus, Defence Cyber Certification, SOC 2 and IRAP. With the Head of GRC, you'll map each control to the systems and practices that satisfy it, explain our setup to auditors in their terms, and agree remediation where there's a gap. You'll produce the evidence for each audit cycle, including device compliance, access reviews, firewall rule audits, physical security assessments and monthly HR security reviews. You'll also keep a runbook of what each audit needs, where the evidence comes from and when it's due. For our FedRAMP programme and US-restricted systems (including GCC High), which are run by our US DevSecOps engineers, you'll coordinate where corporate IT touches that boundary.
• SaaS, AI tooling and automation: You'll govern what software we buy, approve, license, secure and retire, and lead a consolidation programme across an estate that has grown organically. You'll administer our Claude and other AI accounts, MCP connectors and custom Slack integrations, and help colleagues use them securely. You'll remove toil through Slack workflows and Claude scheduled tasks.
• Procurement and policy: Govern renewals, vendor reviews and a formal purchasing process. You'll also keep IT policies (acceptable use, devices, access) current, approved through the Information Security Governance Committee, and followed.

What you'll bring to the role

• Experience: You'll have 5+ years in IT operations, including at least 2 in a lead or management role, in a multi-office or largely remote company. Ideally you've run corporate IT for 100–200 people, owning identity, endpoints, offices and SaaS at the same time.
• Compliance fluency (essential): You'll have hands-on experience taking IT controls through at least two of ISO 27001/27017/27018, Cyber Essentials Plus, DCC, SOC 2 or IRAP. That includes mapping controls to implementation, preparing evidence and working with auditors directly. You build evidence collection into day-to-day operations rather than scrambling at audit time. Candidates without this experience won't be progressed.
• Microsoft depth: You'll have current, hands-on administration experience across M365, Entra ID, conditional access, Intune, Defender, Exchange and SharePoint governance. You'll also have managed a mixed macOS and Windows fleet through MDM with secure baselines and compliance reporting.
• Networking: You'll have practical experience with office networking and firewall administration, including rule reviews and change control e.g. Meraki and Fortigate.
• Commercial management: You'll have owned renewals, negotiated with suppliers and run a purchasing process.
• Judgement and communication: You know the difference between a control that protects the company and one that just slows people down. You can explain it to a sales director who wants a new tool by Friday, write clear procedures, and make a risk or budget case to the executive team.
• Ownership and leadership: You fix things nobody asked you to, you document what you build, and you make sure nothing critical depends on you alone. You've managed at least one person and take their development seriously.
• Vetting: You'll be willing to undergo national security vetting to at least BPSS level.

• You're familiar with AWS, Azure or Google Cloud account structure, Cloudflare, domain registrars and certificate management, enough to hold emergency access and support Platform.
• You've deployed, administered and used LLM tools to run IT itself, such as support assistants, scheduled tasks and MCP connectors.
• You're comfortable with Slack Workflow Builder and other low-code automation. Scripting is useful but not central.
• You've worked with UK defence (DCC or MOD), Australian government (IRAP) or US federal (FedRAMP) requirements, or with customers who run their own security due diligence.
• You hold Microsoft 365/Azure administrator certifications, CompTIA Security+ or equivalent.
• You've been through a company doubling in size and know what breaks when it does.

• Competitive Salary: c.£60,000 - £70,000 depending on specific experience and qualifications relevant to the role.
• Stock Options: Meaningful equity in the company.
• Retirement Plan: Pension scheme to help secure your future.
• Paid Time Off: Unlimited vacation (Yes, you read right!)
• Flexible Work Options: Remote working arrangements
• Private Healthcare: Bupa Medical and Dental cover
• Life Insurance: Peace of mind for you and your family
• Paid parental leave: 16 weeks if you’ve just given birth, 4 weeks if your partner has just given birth (after one year of year of service)
• Additional Perks: Your choice of laptop (Mac or Windows), regular company events to connect with teammates, and opportunities for continued professional development.

These aren’t just principles we print and forget – they’re how we work, how we treat each other, and how we deliver for our customers. They shape the company we are, and the one we aspire to become.

• Customers, Always : Everything starts with our customers. We walk in their shoes, speak their language, and build for their delight and success. We win when they win.
• Make It Happen : We move fast and take ownership. No waiting, no red tape – just action, urgency, and focus on outcomes. We ask for forgiveness, not permission.
• Learn and Invent : We stay curious. We learn what we can from past masters - and make up the rest. Change is constant, and so is our growth.
• Act Like Owners : Titles don’t solve problems - people do. We own challenges, break the rules when it’s necessary, and focus on what matters.
• Turn It Up to 11 : There is no “Good enough”. We raise the bar, push boundaries, and keep building. There’s always a next level.
• Lead With Respect : We listen first, speak honestly, and value every perspective. Integrity, follow-through, and kindness matter.
• Build Trust Through Transparency : We default to openness. We give feedback, share information, and assume positive intent - no secrets, no silos.