IT Operations and Security Lead

About the role

We are seeking an experienced IT Operations and Security Lead to own all IT operations and information security for our market office. The role combines deep hands‑on expertise in both infrastructure management and cyber‑security, reporting directly to the Head of Cloud & Operations and the global Security function.

Key responsibilities

• Own and operate the full information‑security control baseline: vulnerability management, endpoint hardening, EDR/XDR, identity security, email/phishing defence and security awareness.
• Act as first responder for security incidents – detection, triage, containment, evidence preservation, escalation and post‑incident review.
• Manage the office network end‑to‑end: routing, switching, VLAN segmentation, NGFW, IDS/IPS, VPN, Wi‑Fi and ISP relationships.
• Administer Microsoft 365, Entra ID and MDM – identity lifecycle, conditional access, MFA, device compliance, onboarding/off‑boarding.
• Provide primary IT support for the market, handling ticket resolution, endpoint provisioning and service‑quality monitoring.
• Oversee local vendors, procurement and the IT asset register throughout the full lifecycle.
• Maintain audit‑ready evidence for financial regulator and data‑protection requirements.
• Lead a small local IT team or managed‑service partners and drive IT projects and office expansions.

Required profile

• 6–8+ years progressive IT operations experience, including 2–3 years as the primary IT decision‑maker for a site or market.
• Hands‑on information‑security experience equal to operations experience.
• Incident‑response experience as a responder.
• Experience in a regulated environment (financial services, fintech, banking or insurance) with audit exposure.
• People‑leadership experience – direct reports, contractors or managed‑service teams.
• Professional proficiency in English and the primary business language of the market.

Required skills

• Vulnerability management, endpoint hardening, EDR/XDR.
• Identity security, email/phishing defence, security awareness programmes.
• Network engineering: routing, switching, VLAN design, NGFW (Fortinet, Palo Alto, Cisco), IDS/IPS, site‑to‑site and remote‑access VPN, Wi‑Fi controllers.
• Microsoft 365, Entra ID, Intune/MDM, conditional access, MFA, Exchange Online, SharePoint.
• Windows and macOS imaging, patch management, disk encryption.
• Security frameworks: ISO 27001, SOC 2, NIST CSF, CIS Controls.