IT Information Security Lead

A growing, remote-first digital consultancy is looking for an experienced IT and security professional to take ownership of their internal technology environment from the ground up. This is a newly created role, consolidating IT and security responsibilities that have so far been spread across the technical team. You'll become the single point of ownership for internal IT and information security, with a major initial focus on leading the business through ISO 27001 certification. What you'll be doing Owning day-to-day internal IT: device lifecycle management, identity and access administration, SSO/MFA, SaaS platform admin, and IT support across the business Leading endpoint security and EDR, vulnerability and patch management, and incident response coordination Taking the business through ISO 27001 certification from the ground up: building the ISMS, risk register, Statement of Applicability, and control framework, then operating and improving it on an ongoing basis Coordinating internal and external audits, supplier and third-party security assessments, and customer security questionnaires Looking for opportunities to automate IT and security administration rather than relying on manual processes What you'll bring Strong hands-on IT administration experience within a cloud/SaaS-based organisation Practical information security knowledge: IAM, endpoint security, vulnerability management, access reviews A working understanding of ISO 27001 and information security controls (implementation or certification experience a strong plus) Comfort moving between hands-on technical work and security governance, and confidence communicating both to senior stakeholders Scripting experience (Bash, Python, PowerShell or similar) is a bonus, as is exposure to JumpCloud, CrowdStrike, Atlassian Cloud, Entra ID/M365, or Google Workspace What's on offer Remote-first, with co-working access in Belfast and London if wanted 25 days annual leave plus bank holidays Pension matched up to 8% Private healthcare and health assessments Share options Training and professional development budget If you're someone who wants to build an internal IT and security function from scratch rather than inherit someone else's mess, this is a genuinely rare one. Skills: ISO27001 JumpCloud CrowdStrike Entra IAM EDR GRC Benefits: Work From Home