- Company Name
- itecopeople
- Job Title
- Information Technology Compliance Manager
- Job Description
-
**Job Title**
Information Technology Compliance Manager
**Role Summary**
Hands‑on manager responsible for corporate IT operations, Microsoft‑first Azure cloud security, and compliance (SOC 1/2, ISO 27001) in a fast‑growing SaaS business. Acts as the primary technical liaison for internal teams, senior leadership, auditors, and external clients.
**Expectations**
- 3–5 years of direct experience in IT administration, cloud security, or compliance.
- Proven ability to work autonomously in a remote‑first environment with occasional travel to London.
- Proactive, pragmatic delivery mindset with strong stakeholder communication.
- Capacity to develop and maintain audit‑ready documentation and reporting dashboards.
**Key Responsibilities**
- Manage Microsoft 365 estate (Entra ID/Azure AD, Exchange, Teams, SharePoint) and enforce MFA, conditional access, and endpoint policies via Intune.
- Oversee laptop procurement, asset tracking, and remote‑work device logistics.
- Configure and operate Microsoft Defender for Cloud and Microsoft Sentinel; monitor alerts, remediate with engineering teams.
- Control access across Azure subscriptions, maintaining separation of production and non‑production environments.
- Lead SOC 1/SOC 2 and ISO 27001 audit cycles; coordinate evidence collection using tools such as Drata.
- Maintain compliance policies, procedures, and audit documentation; serve as main point of contact for auditors and client security due diligence.
- Govern SaaS inventory and third‑party vendor risk, handling licences, permissions, and security questionnaire responses.
- Engage with external customers on access and platform security issues; present infrastructure designs to technical stakeholders.
- Produce Power BI dashboards reporting security posture, compliance status, and IT KPIs to senior leadership.
**Required Skills**
- Strong expertise with Microsoft 365 and Azure (Azure AD, Intune, Defender, Sentinel).
- Hands‑on experience with SOC 1/2, ISO 27001 frameworks and compliance tooling.
- Scripting/automation ability (PowerShell, Bash, or low‑code).
- Excellent written and verbal communication for technical and non‑technical audiences.
- Experience in a startup or scale‑up SaaS environment.
- Familiarity with identity management, endpoint security, and cloud monitoring.
**Required Education & Certifications**
- Bachelor’s degree in Computer Science, Information Technology, or related technical/mathematical discipline (preferred).
- Relevant certifications (e.g., Microsoft Certified: Security, Compliance, and Identity Fundamentals; ISO 27001 Lead Implementer) are advantageous but not mandatory.