The Role

We are looking for an experienced IT Service & Security Lead to take day-to-day ownership of IT service delivery, infrastructure, and security across four business entities. The aim is to provide colleagues in the UK, US, India, and Australia with dependable IT support while ensuring the technology estate remains secure, patched, and properly controlled.

You will own the security posture end-to-end, including monitoring, detection, response, and remediation across all regions.

This is a hands-on role with significant ownership. You will manage the outsourced service desk partner, oversee the internal support function, and establish standards for IT service management and security operations across the group. The environment is primarily cloud-first, leveraging Microsoft 365, Intune, and cloud applications, with a focus on identity, endpoints, networks, and third-party technology partners.

Key Responsibilities

• Own day-to-day IT service delivery across all entities, including incident, request, and change management.
• Take ownership of the group's cybersecurity posture, including risk management, control coverage, and security improvement initiatives.
• Define security monitoring requirements, select and manage an MDR (Managed Detection & Response) provider, and onboard relevant log sources.
• Manage security operations, including alert triage, detection tuning, incident investigation, and false-positive reduction.
• Lead threat and vulnerability management activities, including scanning, prioritization, remediation, and reporting.
• Develop, test, and maintain incident response procedures, escalation frameworks, and leadership communications.
• Deliver security awareness programmes, phishing simulations, and user risk reporting.
• Manage outsourced service desk providers, ensuring SLA performance, escalation management, and service reviews.
• Lead and support the IT support function, including oversight of regional support resources.
• Administer Microsoft 365, Intune, identity management, and cloud-based business applications.
• Own network infrastructure across sites, including switching, wireless networks, connectivity, and peripheral devices.
• Manage joiner, mover, and leaver processes, as well as regular access reviews.
• Maintain data classification, information protection, labelling, and data loss prevention controls.
• Manage IT assets, licensing, hardware refresh planning, and associated budgets.
• Own backup, business continuity, and disaster recovery processes, including testing and documentation.
• Produce monthly service and security reports covering key operational and security metrics.
• Support project delivery by providing infrastructure and security expertise.