IT Operations Lead (IT & Compliance)

HONK; Toronto; Hybrid; CAD 100,000 - 150,000; Full time

Benefits offered by this job

Hybrid work model

Health, dental and vision coverage

Job summary

HONK in Toronto seeks a detail-oriented IT Operations Lead to own corporate IT for a 70-person SaaS company, from devices to compliance controls behind SOC 2 and PCI DSS. This hands-on senior role reports to the CTO and offers growth into management as the company scales.

You will manage IT and security initiatives, Google Workspace, device lifecycle, SaaS tooling, onboarding/offboarding, and compliance evidence for audits with close collaboration to the Infrastructure team.

Qualifications

• 4-7+ years in IT administration/operations; sole or senior IT owner at a 50-200 person company.
• Background check is required.
• Clear and professional communication across the org.
• Full-lifecycle Google Workspace administration, including security policies and audits.
• MDM/endpoint management in a macOS-first environment (Iru/Kandji, Jamf, or Mosyle).
• EDR deployment/management (CrowdStrike).
• Experience supporting audit controls on devices; familiarity with Vanta, Drata, or Secureframe.
• AI-native automation: using AI to write scripts and automate workflows.

Responsibilities

• Drive IT and security initiatives (MDM, endpoint baseline enforcement).
• Administer Google Workspace end to end: org units, groups, security settings, retention.
• Manage device lifecycle via endpoint management: enrollment, imaging, patching, retirement.
• Provision and manage core SaaS stack, handle access requests, evaluate new tools.
• Own onboarding/offboarding: hardware, accounts, access provisioning and revocation.
• Maintain IT asset inventory and write runbooks/documentation.
• Automate repetitive tasks with AI tools and scripts to scale IT.
• Run internal helpdesk: triage, resolve, document IT issues.
• Lead security awareness program: phishing simulations and training tracking.
• Support SOC 2 and PCI DSS audits: evidence collection and access reviews.

Skills

IT operations

Security awareness

Google Workspace administration

MDM/endpoint management

Audits/compliance

Automation scripting

Tools

Kandji

Jamf

Mosyle

CrowdStrike

Vanta

Drata

Secureframe

Apple Business Manager

Okta

Job description

About HONK

Join the world of HONK, where innovation leads the charge. Our software platform transforms parking operations, making them more efficient, profitable and consumer-friendly. Trusted by 500+ private operators, colleges and universities, municipalities, and real estate owners across North America, HONK serves millions of drivers every year.

The Role

We are seeking a detail-oriented and highly trusted IT Operations Lead to become our first dedicated in-house IT hire, reporting directly to our CTO. You will be the end-to-end owner of corporate IT for a 70-person SaaS company, from device provisioning and helpdesk through to the corporate IT controls behind our SOC 2 and PCI DSS compliance programs. These programs are well established - you'll be operating proven frameworks in close partnership with our Infrastructure team, not building them from scratch. This is a hands-on senior individual contributor role with room to grow into a management position as the company scales.

Key Responsibilities

• Drive IT and security initiatives such as lightweight mobile application management, and endpoint baseline enforcement (disk encryption, screen lock, EDR health).
• Administer Google Workspace end to end: org units, groups, security settings, retention, etc.
• Manage the full device lifecycle through Iru endpoint management (formerly Kandji): procurement, enrollment and imaging, OS version enforcement, patching, repairs, refresh cycles, and secure wiping/retirement of returned devices.
• Provision and manage our software tooling: set up, license, and administer the core SaaS stack, handle access requests, and evaluate new tools that keep a growing company secure without slowing it down.
• Own employee onboarding and offboarding: hardware, accounts, and access provisioned by day one and revoked same-day at exit.
• Maintain the IT asset inventory and write the runbooks and documentation you'd want to inherit.
• Automate the repetitive parts of the role - onboarding steps, evidence collection, endpoint compliance reports - using AI tools and scripts, so the IT function scales faster than headcount.
• Run our internal helpdesk end to end: triage, resolve, and document IT issues across the company.
• Own the security awareness program: run phishing simulation campaigns, enroll clickers into training, and track completion.
• Operate and evidence the corporate IT and other controls in our SOC 2 and PCI DSS audits: access reviews, on/offboarding records, endpoint compliance, and training completion.
• Support audit coordination through our compliance platform: field auditor requests and track evidence collection in partnership with our Infrastructure/DevOps team, who own production infrastructure controls.

About You

• 4-7+ years in IT administration/operations, ideally as the sole or senior IT owner at a 50-200 person company.
• High ownership, discretion, and judgment: this role holds privileged access to nearly every system we run, and a background check is required.
• Clear and professional communication skills - you're the approachable face of IT and security best practices across the org.
• Full-lifecycle Google Workspace administration experience, owning everything from organizational unit structure and security policies to account provisioning and audit compliance.
• Hands-on MDM/endpoint management experience in a macOS-first environment (Iru/Kandji, Jamf, or Mosyle), including zero-touch deployment via Apple Business Manager; enough Windows familiarity to support a small number of exceptions.
• EDR deployment and management experience (CrowdStrike preferred).
• Direct experience supporting and implementing audit controls on devices and endpoints; comfort with compliance automation platforms like Vanta, Drata, or Secureframe.
• AI-native approach to automation - you use AI tools to write scripts, build workflows, and eliminate repetitive work rather than doing the same task a third time.
• Meticulous on/offboarding discipline and strong documentation habits.

Bonus Points

• SSO/IdP administration (Okta, Google, JumpCloud).
• PCI DSS exposure.
• Security awareness tooling (KnowBe4 or similar).
• Certifications: Google Workspace Administrator, Jamf, CompTIA Security+ or similar.

Compensation & Benefits

• Hybrid from our mid-town Toronto office 2+ days/week.
• Comprehensive health, dental and vision coverage.

We are actively hiring for an immediate, open position to join our growing team. As part of our commitment to a fair hiring process, HONK does not use artificial intelligence or automated decision-making tools to screen, assess, or select candidates; every application is reviewed by a real person.