IT Operations & Security Manager (Hybrid)

About the role

We are seeking an experienced IT Operations, Security, Compliance & AI Enablement Lead to own and advance our internal technology landscape. The role ensures systems remain secure, reliable, and compliant while driving AI‑enabled business improvements. This is a hands‑on leadership position for a proactive owner‑operator.

Key responsibilities

• Manage internal IT infrastructure, including laptops, identity management, endpoint (MDM) and networking.
• Oversee employee onboarding, off‑boarding and device lifecycle, and administer Microsoft 365, Slack, Jira, GitHub, AWS IAM, VPNs and other SaaS platforms.
• Maintain hardware/software asset inventory, licensing, and provide timely technical support.
• Develop and continuously improve IT policies, procedures and operational documentation.
• Ensure business continuity through backup, recovery and disaster‑recovery processes.
• Lead the Information Security Management System (ISMS) and ISO 27001 compliance, including surveillance audits and recertification.
• Coordinate penetration testing, vulnerability assessments, remediation and security incident response.
• Manage security awareness training, security policies, risk registers and documentation.
• Support future compliance initiatives such as SOC 2 and CSA STAR, and handle customer security questionnaires.
• Conduct internal audits, supplier security assessments and report compliance KPIs to leadership.
• Administer identity and access management, privileged accounts and regular access reviews.

Required profile

• Proven experience leading IT operations, security, compliance and AI enablement initiatives.
• Hands‑on leadership style with the ability to drive projects independently.
• Strong communication skills to collaborate with engineering, business units and external auditors.
• Detail‑oriented mindset for maintaining policies, documentation and audit readiness.

Required skills

• Microsoft 365
• Slack
• Jira
• GitHub
• AWS IAM
• VPN technologies
• MDM/Endpoint management
• Identity and Access Management (IAM)
• ISO 27001 compliance
• Penetration testing
• Vulnerability assessment
• Security incident response
• Security awareness training