IT & Security Manager

CorePlan; Perth; On-site; AUD 120,000 - 180,000; Full time

Job summary

CorePlan is seeking an IT & Security Manager to own internal IT and security foundations as we scale globally from our Perth origins. You will manage a Mac-first fleet, administer Google Workspace and Microsoft 365, and strengthen cloud security and compliance programs including SOC 2 and ISO 27001.

You will work with leadership to balance hands-on problem solving with strategic architecture, incident response, and security awareness across a growing global crew.

Qualifications

• Hands-on Jamf Pro experience with Smart Groups, policies, configuration profiles, Self Service and DEP enrollment.
• Experience administering Google Workspace and Microsoft 365; strong identity and access management.
• Familiarity with SOC 2 or ISO 27001 requirements and related controls.

Responsibilities

• Manage Mac fleet and user support; improve self-service guidance.
• Administer M365 and Google Workspace including MFA and access reviews.
• Implement and monitor security controls, logging and alerts across IT and AWS.
• Support SOC 2 and ISO 27001, maintain documentation and coordinate testing.
• Lead incident response and business continuity planning.

Skills

Mac-first environment

Security fundamentals

Identity & access management

Incident response

SOC 2 / ISO 27001

Scripting (zsh, bash, python)

Cloud security (AWS)

Endpoint security (CrowdStrike Falcon)

Compliance tooling (Drata)

Education

IT/CS/Cyber Security degree or equivalent

Tools

Jamf Pro

Google Workspace

Microsoft 365

CrowdStrike Falcon

Drata

AWS security

Job description

Good with Macs, serious about security and keen to build something great? We are looking for an IT & Security Manager to take ownership of CorePlan’s internal IT and security foundations as we grow globally.

CorePlan is a Perth-born SaaS company shaking up the mining industry with our digital drilling management platform. We replace paper and spreadsheets with connected workflows used by customers around the world.

You will help our crew work securely and effectively, keeping everyday IT running smoothly while strengthening our security and compliance program.

Reporting to the CFO on compliance, budget and risk, and working closely with our CTO on technical architecture and cloud security, you will combine hands‑on problem-solving with bigger‑picture thinking.

There is plenty to own and plenty of room to make your mark.

What Will You Do?

Keep our crew connected: Manage our predominantly Mac device fleet, support employees and improve self‑service guidance.

Own identity and access: Administer Microsoft 365 and Google Workspace, including MFA, conditional access, licences and access reviews.

Strengthen our defences: Implement and monitor security controls, logging and alerts across our internal IT and AWS environments.

Keep compliance moving: Support SOC 2 and ISO 27001 requirements, maintain documentation and coordinate penetration testing.

Be ready when it counts: Lead incident response and business continuity planning, and manage security threats.

Make smart technology choices: Assess new software, integrations and vendors for security risks.

Cut the admin: Automate onboarding, offboarding and device management alongside our People team.

Build security confidence: Support customer security questionnaires and run practical security awareness sessions for our global crew.

Qualifications and Fit

You know your way around a Mac-first environment and can explain security without making everyone’s eyes glaze over.

You will bring:

A relevant qualification in IT, Computer Science or Cyber Security, or equivalent professional experience.

Hands‑on Jamf Pro experience, including smart groups, policies, configuration profiles, Self Service and Automated Device Enrollment.

Strong macOS knowledge, including FileVault key escrow, account recovery and device lockout troubleshooting.

Scripting skills in zsh, bash or Python to automate workflows.

Experience administering Google Workspace, Microsoft 365 and endpoint security tools such as CrowdStrike Falcon.

Practical SOC 2 or ISO 27001 experience, ideally with a compliance platform such as Drata.

A service‑focused mindset, clear communication and the ability to prioritise when things get busy.

A few handy extras: Relevant security certifications, AWS security expertise, or experience in a scaling SaaS company or the resources sector.

Our best crew members are excited about building a great company. We take ownership, ask questions, share feedback and back each other.

Here is what forms part of our DNA:

First Principles Thinking: We believe in breaking down and understanding problems into their most basic parts. When we eat elephants, we do it one bite at a time.

LFG: We set high goals and ruthlessly prioritise to hit them. We push ourselves to act from first principles, speak up as we care about each other as humans and embrace feedback to win as a team.

Infectious Passion: We highly value team members who love the career path they’ve chosen and strive for mastery. We embrace the excitement of overcoming challenges, and growth. If you are driven and love what you do, you’ll thrive here,

Yes: We're firm believers that we 'can do' until someone shows us the 'can't'. It's funny how often the really gnarly problems are busted by folks who had no clue they were supposed to be unsolvable.

Create, Launch, and Evolve: Creation is the spark of learning. Launch it internally, engage with customers, gather feedback, and evolve. We focus on inputs - what we can control - which ultimately drives outcomes.