IT & Security Manager

The Felix Project; Greater London; Híbrido; GBP 50.000 - 55.000; Jornada completa

Descripción de la vacante

The Felix Project is seeking an IT and Security Manager to lead infrastructure, devices and information security in a hybrid London role. You will oversee a cloud-based Microsoft 365 environment, manage Windows and Android devices, and own warehouse infrastructure including handheld devices and printers.

You will drive security incident response, vulnerability management and data protection controls, while leading a small technical team and coordinating with external suppliers.

Formación

• Experience with a cloud-based Microsoft 365 environment and security tools.
• Proven security incident response and vulnerability management experience.
• Experience managing Windows and Android devices across multiple sites.
• Experience leading a small technical team.
• Ability to explain technical matters clearly to non-technical colleagues.
• Calm, methodical troubleshooting under pressure.
• Knowledge of data protection requirements and controls.

Responsabilidades

• Lead Felix's infrastructure, devices and information security to keep systems secure and well supported.
• Own Microsoft 365, device management, and warehouse device infrastructure.
• Configure security tools and monitor alerts, respond to incidents.
• Line-manage System Administrators and coordinate with third-party suppliers.
• Maintain clear technical documentation and run regular security tests.

Conocimientos

Microsoft 365 admin

Security incident response

Team leadership

Networking fundamentals

Data protection awareness

Educación

Security certification (CISSP/CISM/Cellow)

Herramientas

Defender for Endpoint

Defender for Office 365

Conditional Access

Purview

Entra ID

Intune

SharePoint

Teams

Windows device management

Descripción del empleo

Reporting to: Senior Technology Services Manager

Salary Range:£50,000 - £55,000 per annum

Contract Type:Permanent

Location:Hybrid London – based

Requirements:Felix can only employ applicants who currently have the right towork in the UK.As part of our safer recruitment policy, we doask questions regarding unspent criminal records.

We are Felix

We bring people together to rescue, repurpose, and share surplus food that would otherwise go to waste, turning an environmental problem into a social opportunity. Together with 16 other independent charities, 18,000 volunteers, and thousands of partners, we are the UK’s food rescue network, supporting 1.5 million people across the country. We are about fuller plates, fuller communities, and fuller lives.

Purpose of the Job

The IT and Security Manager is the technical lead for Felix's infrastructure, devices and information security. The role keeps the systems our colleagues rely on every day secure, reliable and well supported, from laptops in our offices to the handheld devices and label printers used in our warehouses.

Infrastructure and devices

• Manage and maintain Felix's cloud only Microsoft 365 environment, including Entra ID, Intune, and SharePoint and Teams administration and governance.
• Manage Windows laptops and desktops and rugged Android warehouse devices across their full lifecycle, from purchase and setup through to secure disposal, and help shape Felix's approach to managing Android devices.
• Own the infrastructure Felix's warehouse management system runs on, including handheld devices, label printers and site connectivity.
• Diagnose and troubleshoot network, firewall and connectivity issues across offices and warehouses, raising and following through changes with Felix's managed network supplier.
• Look after telephony, meeting room audio visual equipment, and office and warehouse printing.
• Act as the technical escalation point for infrastructure, device and security issues raised through the service desk, working with the Service Manager, who owns the service desk and its processes.
• Manage and regularly test Microsoft 365 backup, disaster recovery and business continuity arrangements for the systems in your area.

Access and accounts

• Set the approach and plan for joiner, mover and leaver processes, volunteer access, shared devices in warehouses and kitchens, and Microsoft 365 licence management, delegating day to day delivery to the System Administrators where appropriate.
• Use Power Automate or other low-code tools to automate routine account and device tasks where it saves time and reduces errors.

Information security

• Lead Felix's Cyber Essentials and Cyber Essentials Plus certification, keeping controls and evidence in place all year round.
• Configure and manage Microsoft security tools, including Defender for Endpoint, Defender for Office 365, Conditional Access and multi-factor authentication, and Purview data loss prevention, retention and sensitivity labels.
• Monitor and respond to security alerts, and develop a proper security monitoring framework for Felix.
• Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks.
• Run vulnerability management, including patching and the remediation of findings from penetration tests.
• Run security awareness activity, including phishing simulations and targeted training for colleagues.
• Secure Microsoft 365 for Copilot and other AI tools, managing permissions, reducing oversharing and applying sensitivity labels.
• Plan and implement improvements to security controls, applying recognised frameworks and guidance such as Zero Trust and NCSC guidance, and maintain a security improvement plan for your area.
• Complete security questionnaires from funders, partners and corporate donors.
• Act as the security specialist for the Senior Technology Services Manager, the Head of Technology and the wider team, giving clear advice on risks and how to manage them.
• Provide technical support to the Data Protection Lead, including investigating data breaches, managing access controls and deleting data across systems when required.

Team and ways of working

• Line manage and develop two System Administrators, setting priorities, sharing knowledge and building their technical skills.
• Work with third party suppliers to resolve technical issues promptly.
• Maintain clear technical documentation for systems, configurations, incidents and compliance.
• Carry out occasional out of hours work for planned changes and major incidents.

Person Specification

• Strong, hands-on experience of a cloud-based Microsoft 365 environment and its security tools.
• A strong security background, including Cyber Essentials, security incident response and vulnerability management.
• Practical experience of looking after Windows and Android devices across multiple sites.
• Experience of leading a small technical team and helping people develop their skills.
• A calm, methodical approach to troubleshooting and incidents, including under pressure.
• The ability to explain technical and security matters clearly to non-technical colleagues.
• A practical, collaborative and mission driven approach, with a genuine interest in Felix's cause.
• Proven hands-on experience managing a cloud-based Microsoft 365 environment, including Entra ID, Intune, SharePoint and Teams.
• Strong practical experience of Microsoft security tools, including Defender for Endpoint, Defender for Office 365, Conditional Access and multi-factor authentication, and Purview.
• Experience of managing and securing Windows devices and Android mobile devices at scale.
• Solid networking fundamentals, with experience of diagnosing network and connectivity issues and working with managed network suppliers.
• Experience of achieving and maintaining Cyber Essentials or Cyber Essentials Plus.
• Experience of leading the technical response to security incidents, and of managing vulnerabilities and penetration test remediation.
• Knowledge of how to secure Microsoft 365 for Copilot, including permissions, oversharing and sensitivity labels.
• Experience of line managing or leading a small technical team.
• A recognised security certification, such as CompTIA Security+, or a higher level certification such as CISSP or CISM.
• A good understanding of data protection requirements and the technical controls that support them.
• Clear written and verbal communication skills, including with non-technical audiences.

Equity Diversity Inclusion & Belonging

At Felix, we are committed to promoting equality, diversity, and inclusion in everything we do. We value the unique contributions of every individual and strive to create a respectful, inclusive environment free from discrimination or prejudice. Our commitment extends to all employees, and volunteers, ensuring equal opportunities for everyone, regardless of background or characteristics.

Proud member of the Disability Confident employer scheme