IT Manager

AutogenAI Ltd; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid-working with 3/4 office days in

Regular Team Socials

Unlimited Annual Leave

Laptop

Job summary

AutogenAI Ltd. is seeking an IT Manager to own corporate technology, govern identity and access, devices, offices, and the SaaS estate across multiple countries. You will lead a first-line IT team, work with the Head of GRC and Platform teams, and own audit evidence for ISO and SOC frameworks.

The role combines hands-on leadership with process ownership, vendor management, and policy governance to support rapid growth and security compliance.

Qualifications

• Current, hands-on administration experience across M365, Entra ID, conditional access, Intune, Defender, Exchange and SharePoint governance.
• Experience managing IT budgets, renewals and a formal purchasing process.
• Willingness to undergo national security vetting and work with auditors.

Responsibilities

• Own the corporate IT controls and the evidence that proves they work.
• Govern identity, access, devices, offices and networks across multiple regions.
• Lead a first-line IT Support Engineer and improve AI-assisted helpdesk workflows.
• Oversee procurement, policy publishing and vendor reviews.
• Coordinate with GRC and Platform teams on audits and remediation.

Skills

Leadership

IT governance

Security & compliance

Cloud & SaaS management

Vendor management

Auditing & reporting

Microsoft 365

Entra ID

Intune

Defender

Exchange

SharePoint

Meraki

Fortigate

Tools

M365

Entra ID

Intune

Defender

Exchange

SharePoint

Meraki

Fortigate

Job description

• AutogenAI has grown from a couple of dozen people in a shared London office to over a hundred staff across the UK, US and Australia, over 4 years


• As our IT Manager, you will own the corporate technology behind that growth: identity and access, devices, offices and networks, the SaaS estate, and the IT side of our security and compliance programme


• This is a hands-on leadership role. You’ll govern direction, spend and processes, and manage an excellent first line support specialist, while staying close enough to the work to fix the problem in front of you


• You’ll work alongside the Head of GRC, who owns the compliance frameworks and auditor relationships, and the Platform team, who own production infrastructure


• You own the corporate IT controls that both depend on, and the evidence that proves they work


• Identity and access: You’ll own Microsoft 365 and Entra ID, including Global Admin and break-glass accounts, conditional access, and SSO/SCIM across the SaaS estate


• You’ll hold privileged and emergency access to critical systems, with documented runbooks so access never depends on one person


• Devices and endpoints: You’ll manage the full lifecycle of laptops and mobiles across three countries: procurement, Intune enrolment and configuration, patching, encryption, asset tracking, secure wipe, disposal and ownership transfer


• Joiners, movers and leavers: With People and hiring managers, you’ll own the JML procedure for employees and contractors


• That means access ready before day one, changed when roles change, and removed promptly on exit. You’ll also close the gaps in contractor on- and offboarding and keep dormant accounts under control


• Offices and networks: You’ll run IT for our London and Gold Coast, AU office, covering the network, Wi‑Fi, firewalls, physical access, meeting rooms, and the relationships with building management and suppliers


• For New York and the Gold Coast, you’ll set standards, provide remote support and train on‑site IT contacts. You may also set up new offices


• IT support and your team: You’ll own the ticket queue, the SLAs and a regular satisfaction survey. You’ll line manage and develop our first line IT Support Engineer, and own and improve the AI assistant that handles first‑line support in Slack


• Audit readiness and control translation: We hold ISO 27001, 27017 and 27018, Cyber Essentials Plus, Defence Cyber Certification, SOC 2 and IRAP


• With the Head of GRC, you’ll map each control to the systems and practices that satisfy it, explain our setup to auditors in their terms, and agree remediation where there’s a gap


• You’ll produce the evidence for each audit cycle, including device compliance, access reviews, firewall rule audits, physical security assessments and monthly HR security reviews


• You’ll also keep a runbook of what each audit needs, where the evidence comes from and when it’s due


• For our FedRAMP programme and US‑restricted systems (including GCC High), which are run by our US DevSecOps engineers, you’ll coordinate where corporate IT touches that boundary


• SaaS, AI tooling and automation: You’ll govern what software we buy, approve, license, secure and retire, and lead a consolidation programme across an estate that has grown organically


• You’ll administer our Claude and other AI accounts, MCP connectors and custom Slack integrations, and help colleagues use them securely. You’ll remove toil through Slack workflows and Claude scheduled tasks


• Procurement and policy: Govern renewals, vendor reviews and a formal purchasing process. You’ll also keep IT policies (acceptable use, devices, access) current, approved through the Information Security Governance Committee, and followed

Benefits

• Hybrid-working with 3/4 office days in our beautiful King’s Cross, London office


• Regular Team Socials


• Unlimited Annual Leave (Yes, you read right!)


• Laptop

You’ll administer our Claude and other AI accounts, MCP connectors and custom Slack integrations, and help colleagues use them securely. You’ll remove toil through Slack workflows and Claude scheduled tasksProcurement and policy: Govern renewals, vendor reviews and a formal purchasing process. You’ll also keep IT policies (acceptable use, devices, access) current, approved through the Information Security Governance Committee, and followedThat includes mapping controls to implementation, preparing evidence and working with auditors directly. Candidates without this experience won’t be progressedMicrosoft depth: You’ll have current, hands‑on administration experience across M365, Entra ID, conditional access, Intune, Defender, Exchange and SharePoint governanceNetworking: You’ll have practical experience with office networking and firewall administration, including rule reviews and change control e.g. Meraki and FortigateJudgement and communication: You know the difference between a control that protects the company and one that just slows people down. You can explain it to a sales director who wants a new tool by Friday, write clear procedures, and make a risk or budget case to the executive teamOwnership and leadership: You fix things nobody asked you to, you document what you build, and you make sure nothing critical depends on you alone. You’ve managed at least one person and take their development seriouslyCommercial management: You’ll have owned renewals, negotiated with suppliers and run a purchasing processYou’ll also have managed a mixed macOS and Windows fleet through MDM with secure baselines and compliance reportingVetting: You’ll be willing to undergo national security vetting to at least BPSS levelYou’re familiar with AWS, Azure or Google Cloud account structure, Cloudflare, domain registrars and certificate management, enough to hold emergency access and support PlatformYou’ve deployed, administered and used LLM tools to run IT itself, such as support assistants, scheduled tasks and MCP connectorsYou’re comfortable with Slack Workflow Builder and other low-code automation. Scripting is useful but not centralYou’ve worked with UK defence (DCC or MOD), Australian government (IRAP) or US federal (FedRAMP) requirements, or with customers who run their own security due diligenceYou hold Microsoft 365/Azure administrator certifications, CompTIA Security+ or equivalentYou’ve been through a company doubling in size and know what breaks when it does