IT Operations & Security Lead

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Take ownership of Zen Educate’s internal IT systems and corporate security.

• Report directly to the Chief Technology Officer as part of the Business Systems team.

• Establish a scalable IT and security framework through automation, governance, and AI integration.

• Manage internal identity and access controls across Google Workspace, SSO, MFA, groups, and permissions.

• Develop workflows for onboarding, role changes, and offboarding access processes.

• Create a comprehensive inventory of software and services, detailing ownership, access, costs, and renewal dates.

• Enhance software purchasing, renewal, and retirement processes in collaboration with teams and vendors.

• Define and uphold IT and security policies.

• Execute access reviews, vulnerability management, external testing, incident response procedures, and reporting mechanisms for concerns.

• Develop reusable trust and assurance processes for security questionnaires and audit documentation.

• Oversee Cyber Essentials, future certifications, risk management, and governance.

• Implement secure, patched, encrypted, and accountable device management for both company and personal devices.

• Ensure critical vulnerabilities are addressed within the 14-day patching timeframe.

• Expand the current product incident process to include corporate IT and security.

• Collaborate with the Foundations Lead and Engineering on company-wide security initiatives.

• Provide insights and recommendations regarding tool and service budget decisions.

• Present a joiner-mover-leaver access scenario to cross-functional stakeholders during the hiring phase.

⛳️ Requirements

• Extensive hands-on experience in identity and access management.

• In-depth practical knowledge of endpoint management.

• Strong hands-on experience with automation.

• Solid understanding of SaaS governance.

• Familiarity with vendor and license management.

• Working knowledge of audits and certifications.

• Proficiency in incident response procedures.

• Understanding of data protection principles.

• Strong comprehension of security controls and risk management.

• Ability to apply security measures in alignment with business needs.

• Experience transforming manual, disorganized, or poorly defined processes into scalable systems.

• Excellent communication skills and the ability to work asynchronously.

• Competence in using Google Workspace, SSO, MFA, groups, and permissions.

• Knowledge of vulnerability management, external testing, and incident procedures.

• Familiarity with Cyber Essentials and various security certifications.

• Understanding of endpoint management, patching, and encryption techniques.

• Ability to collaborate effectively with Legal, Data Protection, Foundations, Engineering, People, and Finance teams.

🏝️ Benefits

• Remote work opportunities.

• Flexible and sustainable work pace.

• Career path flexibility and opportunities for progression based on impact and learning.

• Manager acts as a partner, providing support for growth.

• Compensation adjustments linked to level advancements.

• Encouragement of AI and experimentation in professional practice.