IT Operations & GRC Lead: AI-Driven Security & Compliance

Nexl; Sydney; Hybrid; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Hybrid Sydney hub 1-2 days/wk

Up to 4 weeks WFH per year

Birthday leave

Employee stock options (ESOP)

Parental leave

All-hands & transparency

Job summary

Nexl is seeking an IT Operations and GRC Lead in Sydney to own IT operations, security controls, and audit readiness. You’ll manage Microsoft 365 suites, devices, and governance programs, while leveraging AI tools for triage, logging, and evidence gathering.

The role combines end-user support, device management, and security/compliance—across a scaling, AI-first environment with auditors in mind.

Qualifications

• 3+ years in IT operations or support, ideally cloud-first SaaS or professional services.
• Hands-on administration of Exchange Online, SharePoint Online, and Microsoft Entra ID.
• Experience supporting audits or controls under ISO 27001, SOC 2, or similar frameworks.

Responsibilities

• Tenant administration for Microsoft 365: Exchange Online, SharePoint, Teams, OneDrive, Entra ID.
• Manage sites, libraries, permissions, and storage quotas in SharePoint.
• Troubleshoot mail, connectivity, and auditing issues with monitoring alerts.
• Tier 1/2 support for hardware, software, OS, network, and storage.
• Set up and retire user accounts, devices, and access for onboarding/offboarding.
• Patching and firmware updates for devices via Intune.

Skills

IT operations

Exchange Online admin

SharePoint admin

Microsoft Entra ID

Help desk (Tier1/2)

Networking basics

ISO27001/SOC2 audits

AI tooling for triage

Attention to detail

Tools

Intune

Microsoft Defender

Microsoft Purview

PowerShell scripting

Job description

Nexl is seeking an IT Operations and GRC Lead in Sydney to own IT operations, security controls, and audit readiness. You’ll manage Microsoft 365 suites, devices, and governance programs, while leveraging AI tools for triage, logging, and evidence gathering.

The role combines end-user support, device management, and security/compliance—across a scaling, AI-first environment with auditors in mind.