IT Operations & Security Lead

. Own Zen Educate’s internal IT systems and corporate security .

Posted 9/25/2026full-timeRemote • United KingdomSenior💰 £80,000 - £900,000 per yearWebsite

Key responsibilities & impact

Own Zen Educate’s internal IT systems and corporate security
Report directly to the Chief Technology Officer within the Business Systems team
Establish a scalable IT and security posture through automation, governance and AI adoption
Own internal identity and access management across Google Workspace, SSO, MFA, groups and permissions
Build workflows for joiner, mover and leaver access processes
Create a definitive inventory of software and services, including ownership, access, cost and renewals
Improve software purchasing, renewal and retirement with teams and vendors
Define and maintain IT and security policies
Implement access reviews, vulnerability management, external testing, incident processes and concern-reporting mechanisms
Build reusable trust and assurance processes for security questionnaires and audit evidence
Manage Cyber Essentials, future certifications, risk management and governance
Establish secure, patched, encrypted and accountable device management for company and personal devices
Ensure critical vulnerabilities are remediated within the 14-day patching window
Extend the existing product incident process to corporate IT and security
Coordinate with Foundations Lead and Engineering on company-wide security initiatives
Provide visibility and recommendations for tool and service budget decisions
Present a joiner-mover-leaver access scenario to cross-functional stakeholders during the hiring process

What you’ll need

Hands-on depth in identity and access
Hands-on depth in endpoint management
Hands-on depth in automation
Working grasp of SaaS governance
Working grasp of vendor and licence management
Working grasp of audits and certification
Working grasp of incident response
Working grasp of data protection
Strong understanding of security controls and risk management
Ability to apply security proportionately to business needs
Experience improving manual, messy or poorly defined processes into scalable systems
Strong communication and async working habits
Ability to work with Google Workspace, SSO, MFA, groups and permissions
Knowledge of vulnerability management, external testing and incident processes
Familiarity with Cyber Essentials and security certifications
Understanding of endpoint management, patching and encryption
Ability to collaborate with Legal, Data Protection, Foundations, Engineering, People and Finance teams

Comp & perks