IT Manager, Corporate Infrastructure & Security

SUMMARY

We are seeking a hands-on IT Manager to own and continuously improve our corporate IT infrastructure, systems and security.

This role is the first in-house function and owns the full employee IT lifecycle: onboarding, offboarding, devices, access controls, software administration and on-site support. You will also roll out practical, scalable cybersecurity processes in partnership with team leaders and our outsourced IT provider (MSP). The MSP stays in place for specialized expertise, added capacity and backup coverage; you are the primary internal owner of corporate IT.

The ideal candidate combines strong technical judgment with a service-oriented mindset and is comfortable setting standards, documenting processes and following through on implementation.

PRIMARY ROLE AND RESPONSIBILITIES

Infrastructure & Asset Management

• Serve as primary internal owner and point of contact for corporate IT systems and employee technology needs
• Manage procurement, configuration, inventory, patching and secure disposal of laptops, mobile devices, networks, printers and conference room technology
• Set hardware and software standards company-wide

Identity & Systems Administration

• Administer Google Workspace, Microsoft 365 and core business applications
• Manage MFA, SSO and password tools; implement role-based access and approval workflows
• Run periodic access reviews, remove inactive or orphaned accounts and document exceptions
• Own the IT side of employee and contractor onboarding and offboarding

Endpoint & Cybersecurity

• Develop and enforce practical IT security policies, standards and baseline configurations
• Manage EDR, device encryption, MDM and patching
• Monitor security alerts and coordinate response with the MSP and other specialists
• Run phishing simulations and security awareness training; track vulnerabilities through remediation
• Assess new tools and third-party software for security, privacy and access risks

Governance & Business Continuity

• Maintain incident response plan, business continuity, disaster recovery and backup procedures, and periodically test recovery
• Track IT and cybersecurity risks and update management regularly
• Document controls and maintain evidence for audit, regulatory, insurance and customer diligence requests

Helpdesk & Operations

• Establish ticketing workflows and escalation paths
• Troubleshoot employee hardware, software, connectivity and access issues
• Document architecture, configurations and processes so no critical knowledge or credentials depend on one person

Vendor & Financial Ownership

• Serve as primary relationship owner for the MSP and other IT vendors
• Support annual IT and cybersecurity budgeting and monitor spend against budget
• Negotiate service terms and identify opportunities to improve service or reduce cost

QUALIFICATIONS

• 5+ years in corporate IT, IT infrastructure or systems administration, including as an internal IT owner in a growing organization
• Hands-on experience with Google Workspace or Microsoft 365 administration, identity and access (MFA, SSO), and endpoint management (configuration, patching, encryption, security)
• Working knowledge of networking, Wi-Fi and on-site office and conference room technology
• Proven record of developing, documenting and implementing IT policies and workflows
• Strong vendor and project management; able to explain technical and security needs to non-technical teams
• Excellent service orientation, sound judgment and discretion with confidential data
• Able to work regularly on-site and respond to time-sensitive issues

OTHER QUALIFICATIONS

• Startup or high-growth experience; life sciences, medical device, healthcare or other regulated environments
• Familiarity with NIST CSF, CIS Controls or SOC 2; experience supporting cyber insurance applications, customer security reviews or audits
• Experience with MDM and endpoint platforms (Intune, Jamf or similar) and with ticketing, asset-management and security-awareness tools
• Certifications such as Security+, CISSP, CISM, or Microsoft, Google or Apple credentials
• Experience coordinating cybersecurity incidents with MSPs, legal counsel, insurers or forensic specialists
• Proactive, pragmatic problem solver who balances security, usability and cost, and builds scalable systems while resolving immediate issues