IT Specialist

• Build the IT function from nothing and establish how identity, devices, access, tooling, and security controls should operate.
• Own Google Workspace and identity administration, including organizational structure, security settings, licenses, groups, mail routing, and retention.
• Enforce SSO and MFA across business tools and protect the company domain from email spoofing.
• Manage joiner, mover, and leaver access, quarterly access reviews, third-party app access, and privileged access governance.
• Select, deploy, and operate MDM across company-owned macOS and Windows devices, including encryption, screen lock, patching, endpoint protection, remote lock, and wipe.
• Establish management practices for personally owned devices.
• Build and maintain a global hardware asset register and manage procurement, returns, buybacks, resale, secure disposal, and data-destruction evidence.
• Govern enterprise tooling and SaaS, including ownership, costs, renewals, data classification, DPA status, license reclamation, duplicate-tool removal, and shadow IT.
• Implement, operate, and evidence SOC 2 and GDPR technical controls; coordinate penetration tests and remediation.
• Own customer security questionnaires and enterprise security reviews.
• Run security awareness and phishing training and build an internal knowledge base.
• Operate IT support across time zones and ensure day-one readiness, same-day offboarding, and evidence trails.
• Automate provisioning, deprovisioning, and reporting.
• Manage IT vendors, renewals, and budget in partnership with Finance.

• 5-8 years in IT operations or IT and security, including a distributed or remote-first environment
• Deep Google Workspace administration - real depth, not familiarity with the admin console
• Hands-on MDM ownership across macOS and Windows
• Identity and access management: SSO, MFA, provisioning, access reviews
• Experienced in vendor negotiation and renewal management
• Has carried SOC 2 (or ISO 27001) controls through an audit as an implementer, not a policy author
• Working GDPR knowledge in a technical context
• Multi-country asset lifecycle management
• Scripting and automation for provisioning and reporting
• Experience administering JumpCloud and using Drata or equivalent compliance platforms

• Fully Remote: Work from anywhere - yes, your couch in pajamas is totally fine.
• Big Impact: We're a small team, so your contributions will directly shape our future.
• Lots of Learning: We're growing, and so will you - there's plenty of room to expand your skills and take on new challenges.
• People & Culture: Expect to be surrounded by a bunch of super passionate and pretty awesome people, and a culture of trust and transparency.