IT Operations Lead – Security

This is a fully remote position, open to applicants in Canada.

📋 Description

• Take ownership of Zen's internal IT systems and security.

• Report directly to the Chief Technology Officer as a member of the Business Systems team.

• Develop a clear, proportionate, defensible, and scalable IT and security framework.

• Automate identity and access workflows across Google Workspace, SSO, MFA, groups, and permissions.

• Implement a least-privilege access model that adapts as employees join, change roles, or leave.

• Create a comprehensive software and service inventory detailing ownership, access, cost, and renewals.

• Enhance software purchasing, renewal, and retirement processes in collaboration with teams and vendors.

• Define and uphold IT and security policies.

• Execute access reviews, vulnerability management, external testing, incident response processes, and concern reporting.

• Prepare security questionnaires and compile audit evidence.

• Oversee Cyber Essentials and future certifications, along with risk management and governance.

• Develop a reusable and increasingly self-service trust process.

• Collaborate with Legal and Data Protection advisors on privacy-related security issues.

• Implement secure, patched, encrypted, and accounted-for device management, including personal and company devices.

• Ensure devices are securely provisioned from onboarding to retirement.

• Monitor critical vulnerabilities and conduct remediation within the 14-day patching window.

• Extend the established product incident process to encompass corporate IT and security.

• Collaborate with Foundations, Engineering, People, Business Systems, and Finance teams on company-wide initiatives.

• Provide insights and recommendations for senior leaders regarding tool and service budget decisions.

⛳️ Requirements

• Must be eligible to work in Canada.

• Extensive hands-on experience with identity and access management.

• Significant hands-on expertise in endpoint management.

• Proven hands-on experience with automation.

• Familiarity with SaaS governance.

• Understanding of vendor and license management.

• Knowledge of audits and certification processes.

• Proficiency in incident response.

• Awareness of data protection principles.

• Solid understanding of security controls and modern IT and security practices.

• Business-oriented approach to proportional risk management.

• Strong communication skills across all levels of the organization.

• Capability to work with automation, APIs, workflow tools, AI, native platform automation, or enhanced processes.

🏝️ Benefits

• Equity compensation.

• 20 Paid Vacation Days and 11 Paid Company Holidays.

• Comprehensive medical, dental, and vision insurance.

• Sick leave.

• Paid biweekly.

• Sustainable pace and healthy teams.

• Career path flexibility and opportunities for growth.