Head of IT, AutogenAI

• Experience: You'll have 5+ years in IT operations, including at least 2 in a lead or management role, in a multi-office or largely remote company. Ideally you've run corporate IT for 100–200 people, owning identity, endpoints, offices and SaaS at the same time
• Compliance fluency (essential): You'll have hands-on experience taking IT controls through at least two of ISO 27001/27017/27018, Cyber Essentials Plus, DCC, SOC 2 or IRAP. That includes mapping controls to implementation, preparing evidence and working with auditors directly. You build evidence collection into day-to-day operations rather than scrambling at audit time. Candidates without this experience won't be progressed
• Microsoft depth: You'll have current, hands-on administration experience across M365, Entra ID, conditional access, Intune, Defender, Exchange and SharePoint governance. You'll also have managed a mixed macOS and Windows fleet through MDM with secure baselines and compliance reporting
• Networking: You'll have practical experience with office networking and firewall administration, including rule reviews and change control e.g. Meraki and Fortigate
• Commercial management: You'll have owned renewals, negotiated with suppliers and run a purchasing process
• Judgement and communication: You know the difference between a control that protects the company and one that just slows people down. You can explain it to a sales director who wants a new tool by Friday, write clear procedures, and make a risk or budget case to the executive team
• Ownership and leadership: You fix things nobody asked you to, you document what you build, and you make sure nothing critical depends on you alone. You've managed at least one person and take their development seriously
• Vetting: You'll be willing to undergo national security vetting to at least BPSS level

Desirable

• AutogenAI has grown from a couple of dozen people in a shared London office to over a hundred staff across the UK, US and Australia, over 4 years. The Head of IT owns the corporate technology behind that growth: identity and access, devices, offices and networks, the SaaS estate, and the IT side of our security and compliance programme. This is a hands-on leadership role. You'll govern direction, spend and processes, and manage an excellent first line support specialist, while staying close enough to the work to fix the problem in front of you
• You'll work alongside the Head of GRC, who owns the compliance frameworks and auditor relationships, and the Platform team, who own production infrastructure. You own the corporate IT controls that both depend on, and the evidence that proves they work
• Identity and access: You'll own Microsoft 365 and Entra ID, including Global Admin and break-glass accounts, conditional access, and SSO/SCIM across the SaaS estate. You'll hold privileged and emergency access to critical systems, with documented runbooks so access never depends on one person
• Devices and endpoints: You'll manage the full lifecycle of laptops and mobiles across three countries: procurement, Intune enrolment and configuration, patching, encryption, asset tracking, secure wipe, disposal and ownership transfer
• Joiners, movers and leavers: With People and hiring managers, you'll own the JML procedure for employees and contractors. That means access ready before day one, changed when roles change, and removed promptly on exit. You'll also close the gaps in contractor on- and offboarding and keep dormant accounts under control
• Offices and networks: You'll run IT for our London and Gold Coast, AU office, covering the network, Wi-Fi, firewalls, physical access, meeting rooms, and the relationships with building management and suppliers. For New York and the Gold Coast, you'll set standards, provide remote support and train on-site IT contacts. You may also set up new offices
• IT support and your team: You'll own the ticket queue, the SLAs and a regular satisfaction survey. You'll line manage and develop our first line IT Support Engineer, and own and improve the AI assistant that handles first-line support in Slack
• Audit readiness and control translation: We hold ISO 27001, 27017 and 27018, Cyber Essentials Plus, Defence Cyber Certification, SOC 2 and IRAP. With the Head of GRC, you'll map each control to the systems and practices that satisfy it, explain our setup to auditors in their terms, and agree remediation where there's a gap. You'll produce the evidence for each audit cycle, including device compliance, access reviews, firewall rule audits, physical security assessments and monthly HR security reviews. You'll also keep a runbook of what each audit needs, where the evidence comes from and when it's due. For our FedRAMP programme and US-restricted systems (including GCC High), which are run by our US DevSecOps engineers, you'll coordinate where corporate IT touches that boundary
• SaaS, AI tooling and automation: You'll govern what software we buy, approve, license, secure and retire, and lead a consolidation programme across an estate that has grown organically. You'll administer our Claude and other AI accounts, MCP connectors and custom Slack integrations, and help colleagues use them securely. You'll remove toil through Slack workflows and Claude scheduled tasks
• Procurement and policy: Govern renewals, vendor reviews and a formal purchasing process. You'll also keep IT policies (acceptable use, devices, access) current, approved through the Information Security Governance Committee, and followed