Senior IT Engineer, Risk Ledger
£55-65k
+ Equity
2-3 days a week in office
Supply chain cybersecurity provider
Posted today
Supply chain cybersecurity provider
21-100 employees
Posted today
£55-65k
+ Equity
2-3 days a week in office
21-100 employees
Company mission
To secure the global supply chain.
Role
Who you are
- 4+ years in IT operations or systems administration, including at least 2 in an engineering-led role at a SaaS or similar fast-growing company
- Deep, hands-on administration of a cloud identity provider and productivity suite, including identity, groups, app access and security settings
- Strong experience managing a macOS fleet with an MDM platform: profiles, policies, scripting and zero-touch enrolment
- Experience implementing SSO (SAML/OIDC) and SCIM provisioning across a SaaS estate
- A track record of automating JML and admin work rather than doing it by hand
- Hands-on experience rolling out and administering AI tools in a business, and using AI or workflow automation to make IT operations faster
- Scripting ability in at least one language (such as Bash, Python or JavaScript) and comfort working with REST APIs
- A strong security mindset: least privilege, phishing and credential risk, browser and extension risk, and how IT controls map to audit evidence
What the job involves
- As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate
- You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices
- The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale
- This is an engineering role, not a help desk role
- You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement
- Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing
- Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform
- Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based
- Run access changes and privileged-account requests, and support the quarterly access reviews our policies require
- Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe
- Build and enforce endpoint controls, including controls on local AI tooling, browser and extension policy, and just-in-time admin elevation
- Manage enrolment of personal devices that access company data
- Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations
- Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT
- Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA
- Support colleagues in the UK and US, including those employed through third-party arrangements
- Own the IT support queue and channels: triage, resolve, and set clear expectations on response times
- Maintain self-help guides and runbooks so common requests become self-service
- Look after hardware, AV, meeting rooms and office technology, including office moves
- Spot recurring issues and fix the cause, not the ticket
- Be the Director’s hands-on IT counterpart, implementing security controls, policies and improvements across our IT estate and keeping them running
- Bring a security lens to every IT decision, flagging risks early and proposing secure alternatives rather than workarounds
- Configure and tune browser and SaaS security tooling, and act on its alerts, such as leaked credentials and unsanctioned apps
- Run first-line triage on reported phishing and IT-side incident response, including preserving evidence from devices
- Review new tools, integrations and browser extensions against our supplier and AI governance processes before they’re allowed
- Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits
- Support security projects, policy updates, audits and reporting
- Make automation the default. Script, integrate and orchestrate repetitive IT and admin work using scripting, APIs, workflow tools and AI agents, and document what you build
- Build AI-assisted IT operations, such as agents that triage requests, answer common questions from our runbooks, or check tool requests against our approval criteria
- Roll out, configure and administer approved AI tools, connectors and integrations so every team can use them productively and safely
- Put practical guardrails in place in line with our AI policies, covering access scopes, data boundaries, connector and MCP controls, and visibility of what’s in use
- Help colleagues adopt AI well through guides, office hours and quick wins, and feed what you learn into our AI governance
- Evaluate and introduce IT and AI tooling with clear cost and risk trade-offs, help shape the IT roadmap with the Director, and mentor any future IT Ops Engineer
Salary benchmarks
Our take
Risk Ledger was founded with the goal to shift the way organisations deal with cybersecurity and information management in the supply chain. Through its platform, Risk Ledger is marking a turning point in the process of discovering, measuring and then mitigating security risks for companies, their clients and their suppliers. Risk Ledger is trying to lower the number of data breaches experienced by companies and consumers as a consequence of supply chain attacks on a global level.
According to research, over 60% of organisations have suffered a data breach originating in the supply chain with fines inevitably following. Mainstream risk assurance methods are no longer be able to effectively detect and mitigate the growing risk associated with more complex and more global supply chains. SMEs are also generally less resilient to security attacks than multinational corporations due to smaller budgets and teams; over 50,000 SMEs in the UK could collapse after a successful cyber attack.
Risk Ledger has helped customers collect supplier data up to 70% faster than before and reduced per-supplier costs by up to 90%. Its challenge now is to provide integrations with different tools and, by doing so, turn Risk Ledger into a Security Information and Event Management (SIEM) solution.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 5 rounds)
Nov 2023
$8.5m
SERIES A
Oct 2021
$2.9m
SEED
Total funding: $13.9m
Company benefits
- Generous EMI equity package
- Enhanced family (parental) leave - gender-neutral policy, 12 weeks paid leave
- Comprehensive Private Healthcare covering both physical and mental well-being
- 28 days holiday (plus bank holidays!)
- Additional 30 days of unpaid leave per year to use as you wish
- £500 WFH budget
- Flexible hybrid working
Company values
- Communicate
- Always be learning
- Be honest
- Simple is best
- Aim high
- Find solutions, be pragmatic
Company HQ
Shoreditch, London
Articles
Leadership
Haydn Brooks
(CEO)Previously a Consultant in Cyber Security/Risk at KPMG & Deloitte. Also worked as Information Security Manager at Secgate.
Daniel Saul
(CTO)Started Risk Ledger after graduating from UCL, where he studied Electronic Engineering with Computer Science.
Diversity, Equity & Inclusion at Risk Ledger
India Renziehausen (Customer Success Lead)
- We're proud to come from all walks of life
- Continuing to build on strong foundations, each and every person at Risk Ledger consciously and intentionally holds themselves accountable to help create a truly special environment to work in. One where everyone can feel safe and connected to their colleagues.
- A community where you can embrace your authentic self everyday, even the bad or hard ones. Where your uniqueness and diversity of thought - through both career and life experiences - are seen, celebrated and valued.
Share this job
View 4 more jobs at Risk Ledger