Infrastructure Manager

What You Will Do

• Own IT Operations: Lead day-to-day internal IT operations, including identity and access management, endpoint management, SaaS administration, onboarding/offboarding, and helpdesk functions. Establish and enforce standards for device security, patching, and configuration management across the company.
• Drive GRC & Audit Readiness: Direct the governance, risk, and compliance program. Maintain the ISO 27001 risk register, manage control ownership, collect audit evidence, and lead preparations for internal and external audits across SOC 2, ISO 27001, and ISO/IEC 42001.
• Support Security Engineering: Partner closely with Security Engineering and Detection Engineering teams to ensure internal infrastructure changes account for logging, EDR, SIEM sources, and overall detection coverage needs. Act as the primary bridge between internal IT changes and security impact reviews.
• Lead People & Programs: Directly manage and mentor the IT and Compliance/GRC leads. Build documented runbooks and scalable processes, and regularly report IT and GRC roadmap progress and risk posture to the CISO.
• Oversee Vendors & Risk: Manage vendor relationships, software licensing, and third-party vendor risk assessment workflows.

Qualifications

• 5+ years of hands-on experience in IT operations, infrastructure management, or related technical domains.
• 2+ years of direct people management or team leadership experience.
• Hands-on experience with compliance frameworks such as SOC 2, ISO 27001, or equivalent frameworks.
• Proven technical proficiency with IAM platforms, endpoint management systems, and core SaaS administration tooling.
• Solid baseline understanding of security engineering principles and the ability to collaborate effectively with detection teams.
• Bachelor's degree in Information Technology, Computer Science, Information Security, or equivalent practical experience.
• Excellent written and verbal communication skills with experience presenting directly to executive stakeholders and external auditors.

Preferred Qualifications

• Prior experience in or alongside an MDR, MSSP, or security-focused business.
• Familiarity with AI/ML governance principles, ISO/IEC 42001, or the EU AI Act.
• Professional certifications such as CISA, CISM, or ISO 27001 Lead Implementer/Auditor.
• Experience designing and executing structured third-party vendor risk assessment programs.

Why Join Us?