IT Operations and GRC Lead

Nexl; Sydney; Hybrid; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Hybrid Sydney hub 1-2 days/wk

Up to 4 weeks WFH per year

Birthday leave

Employee stock options (ESOP)

Parental leave

All-hands & transparency

Job summary

Nexl is seeking an IT Operations and GRC Lead in Sydney to own IT operations, security controls, and audit readiness. You’ll manage Microsoft 365 suites, devices, and governance programs, while leveraging AI tools for triage, logging, and evidence gathering.

The role combines end-user support, device management, and security/compliance—across a scaling, AI-first environment with auditors in mind.

Qualifications

• 3+ years in IT operations or support, ideally cloud-first SaaS or professional services.
• Hands-on administration of Exchange Online, SharePoint Online, and Microsoft Entra ID.
• Experience supporting audits or controls under ISO 27001, SOC 2, or similar frameworks.

Responsibilities

• Tenant administration for Microsoft 365: Exchange Online, SharePoint, Teams, OneDrive, Entra ID.
• Manage sites, libraries, permissions, and storage quotas in SharePoint.
• Troubleshoot mail, connectivity, and auditing issues with monitoring alerts.
• Tier 1/2 support for hardware, software, OS, network, and storage.
• Set up and retire user accounts, devices, and access for onboarding/offboarding.
• Patching and firmware updates for devices via Intune.

Skills

IT operations

Exchange Online admin

SharePoint admin

Microsoft Entra ID

Help desk (Tier1/2)

Networking basics

ISO27001/SOC2 audits

AI tooling for triage

Attention to detail

Tools

Intune

Microsoft Defender

Microsoft Purview

PowerShell scripting

Job description

Nexl is a fast-growing LegalTech company on a mission to elevate the business of law. The company builds an AI-driven CRM and growth intelligence platform that brings a firm’s internal and external data together so lawyers, marketing teams, and business development teams can collaborate, spot opportunities, and grow revenue.

Nexl has been recognised by the Financial Times, Deloitte, and the Australian Financial Review as one of the fastest-growing companies in the region, is trusted by 150+ law firms globally, and recently closed a $23M USD Series B led by Tidemark Capital.

The Opportunity

Nexl is looking for an IT Operations and GRC Lead to own how our systems are run and how our security certifications are kept audit-ready. You will administer Microsoft 365, look after the devices and tools our teams use every day, and lead the governance, risk, and compliance work that shows our controls operate as intended.

Law firms trust Nexl with their relationship data, so well-run IT and sound controls are part of what we deliver to customers. The systems you administer are the same ones our auditors review, which makes IT operations and compliance one connected job here.

AI is part of how we work. We expect you to use AI tools by default for ticket triage, documentation, log analysis, and evidence gathering, and to help decide where automation is safe and where human review must stay in place.

What You’ll Own & Do:

Microsoft 365 and collaboration:

• Tenant administration: Run Exchange Online, SharePoint Online, Teams, OneDrive, and Microsoft Entra ID, keeping them secure, available, and correctly licensed.
• Sites and permissions: Maintain SharePoint sites, libraries, workflows, and permissions, and manage site growth and storage quotas.
• Mail and connectivity: Troubleshoot Exchange, mobility, and connectivity issues, including those raised by monitoring alerts.
• Usage and audit reporting: Review audit logs, storage, and usage reports to catch problems early and plan capacity.

End-user and endpoint support:

• Tier 1 and tier 2 support: Resolve hardware, software, operating system, network, and storage issues, and keep clear ticket records.
• Joiners, movers, and leavers: Set up and retire accounts, devices, and access so every new starter is productive on day one.
• Device management: Manage laptops and mobile devices through Intune, including patching and firmware and BIOS updates.
• Training: Show colleagues how to get the most from Microsoft 365 and collaboration tools such as Teams, OneDrive, OneNote, and Outlook.

Security, governance, and compliance:

• Access reviews: Run quarterly reviews and document that access to data, systems, and facilities is appropriate and limited to authorised people.
• Audit evidence: Collect and maintain evidence for our ISO 27001 and SOC 2 programs, and work alongside external auditors during reviews.
• Policies and risk: Keep security policies current, maintain the risk register, and report risk status to leadership.
• Customer assurance: Help answer customer security questionnaires and due diligence requests.
• Process improvement: Spot manual IT and compliance tasks worth automating and put the fix in place.

What We're Looking For:

Must haves:

• 3 or more years in IT operations or support, ideally in a cloud-first SaaS or professional-services environment.
• Hands-on administration of Exchange Online, SharePoint Online, and Microsoft Entra ID.
• Help desk experience at tier 1 and tier 2, and the patience to teach colleagues.
• Working knowledge of networking, including IP, DNS, and SMTP.
• Experience supporting audits or controls under ISO 27001, SOC 2, or a similar framework.
• Comfortable using AI tools to speed up documentation, triage, and analysis.
• High attention to detail, with the discipline to keep evidence clean and current.
• Explains technical and control topics clearly to non-technical colleagues and auditors.
• Comfortable in a scaling environment where problems often arrive without a clear owner.

Nice to haves:

• Experience with Intune or other mobile device management platforms.
• Familiarity with Microsoft Defender and Microsoft Purview.
• PowerShell scripting for automation and reporting.
• A relevant certification, such as Microsoft 365 Administrator Expert or ISO 27001 Lead Implementer.
• Experience in LegalTech or other professional-services software environments.

Life at Nexl

• Hybrid working. You'll be in our Sydney hub 1-2 days a week for collaboration.
• Work from anywhere. Spend up to four weeks a year working from outside Australia.
• Purposeful connection. A jam-packed social scene with weekly catered lunch, quarterly socials, team off-sites, and events throughout the year to bring everyone together.
• Birthday leave. Take a paid "Nexl Day" during the week of your birthday.
• High growth. A scaling environment with autonomy, ownership, and visible impact.
• ESOP. Employee stock options so you share in the upside.
• Parental leave. Paid leave to support you and your family as it grows.
• Transparent by default. Fortnightly all-hands with strategy, metrics, wins, and learnings.
• Tools & tech. Modern, AI-first ways of working to help you move faster and smarter, plus a work laptop.

Even if you don't tick every box, Nexl would still love to hear from people who are excited by the mission and believe they would thrive in a high-growth, high-accountability environment.