IT Systems & Compliance Manager

CitySwift; Galway; On-site; EUR 60,000 - 85,000; Full time

Benefits offered by this job

Hybrid working

Health and life insurance

25 days annual leave

Enhanced family leave

Pension scheme

Bike to work

Employee referral bonus (€4,000)

Job summary

CitySwift is seeking a hands-on IT contractor to own day-to-day IT in Galway, building sustainable controls, documentation and runbooks. You’ll manage a mixed Mac and Windows fleet, identity and access across Google Workspace and Microsoft 365, and handle endpoint security and licensing to enable ISO 27001 readiness.

This hybrid role requires on-site presence at least 3 days a week and will also support onboarding/offboarding, asset management, and governance of AI tooling.

Qualifications

• Hands-on IT support with a focus on OS and device management.
• Experience implementing ISO 27001 readiness and evidence collection.
• Onsite work required 3 days per week in Galway; hybrid setup.
• Manage Mac/Windows fleet, identity and access across Google Workspace and Microsoft 365.
• Build runbooks to enable future MSP or AI-assisted support.

Responsibilities

• Own full device lifecycle for Mac and Windows fleets.
• Administer Mosyle for Mac fleet and Intune/Entra ID for Windows.
• Implement least-privilege admin and MFA coverage across core platforms.
• Design joiner/mover/leaver processes with HiBob as the source of truth.
• Deliver IT controls and evidence for ISO 27001 Stage 1 & 2.
• Support Galway and remote colleagues across the UK and Europe.
• Leave behind documented runbooks and onboarding/offboarding guidance.

Skills

Mac administration

Windows administration

Identity & access management

ISO 27001

Endpoint security

Vendor management

Service desk

Tools

Google Workspace

Microsoft 365

Intune

Entra ID

Mosyle

Bitdefender

Job description

About Cityswift

CitySwift is the world’s leading performance optimisation platform for public transport, enabling data-driven decision-making for some of the largest transport networks globally. Backed by over €15 million in venture capital funding, we partner with major public transport operators and government authorities, including Go-Ahead Group, Transport for London, and many more. CitySwift is experiencing accelerated growth, with 117% year-over-year revenue growth in 2025.

Our mission is to increase the adoption of sustainable public transport worldwide. Today, our platform optimises more than 3 billion passenger journeys annually, and our target is to reach 10 billion journeys by the end of 2026.

At CitySwift, you’ll have the opportunity to take ownership, make a measurable impact, and grow professionally as part of a collaborative, mission-driven team. Join us in shaping the future of public transport by driving the next phase of CitySwift’s growth.

About the Role

We’ve grown past 50 people across Ireland and the UK without a dedicated IT function, which is no longer sustainable - particularly with ISO 27001 certification underway. Today, IT support runs through Slack and largely sits with our VP of Engineering.

This hands-on contract role will take ownership of day-to-day IT while building the systems, documentation and controls to make it sustainable. You’ll manage our mixed Mac and Windows fleet, identity and access across Google Workspace and Microsoft 365, endpoint security, licensing, and IT evidence for our ISO 27001 Stage 1 and Stage 2 audits. You’ll also tackle current issues including device and asset management, Windows licensing, Bitdefender inventory, Teams licences, Google groups and shared drives, admin access, external sharing, and governance of growing AI tooling.

We can support a hybrid working arrangement, but you’ll need to be onsite at least 3 days per week , as the role involves hands-on device setup and troubleshooting, onboarding and offboarding, managing equipment and supporting employees directly. Success means leaving behind clear runbooks, systems and controls that a fellow employee, MSP or AI-assisted support flow can take over.

Key Responsibilities

Device fleet & endpoint management

• Own the full device lifecycle: specification, procurement, enrolment, handover, support, reclaim and secure wipe.

• Administer Mosyle for the Mac fleet - ABM/ADE enrolment, configuration profiles, app deployment, Activation Lock bypass and recovery.

• Administer Microsoft Intune, Entra ID and Autopilot for the Windows fleet - hash collection, enrolment profiles, compliance policies, BitLocker and LAPS recovery.

• Standardise our hardware specification and build images so a new starter’s machine is ready before their first morning, not during it.

Identity, access & joiner-mover-leaver

• Own identity and access across Google Workspace, Microsoft 365/Entra, Slack, Atlassian and our internal tooling.

• Design and run a documented joiner-mover-leaver process with HiBob as the source of truth, including approval trails and timely revocation.

• Rationalise Google groups, shared drives and external sharing so teams can collaborate with customers without ad-hoc workarounds.

• Implement least-privilege admin, break-glass accounts and MFA coverage across all core platforms.

ISO 27001 delivery

• Deliver the IT and endpoint controls for certification, working alongside our compliance platform, external consultancy and chosen certification body.

• Build and maintain an accurate asset inventory and access register that will stand up to audit.

• Write and operationalise the IT-side policy set - acceptable use, access control, endpoint security, mobile device, backup and secure disposal - so they describe what actually happens.

• Collect and organise evidence for Stage 1 and Stage 2, support internal audit and management review, and coordinate the annual penetration test.

• Own the supplier and vendor risk register for IT and SaaS suppliers, including our AI tooling vendors.

Endpoint security & vendor management

• Take ownership of Bitdefender GravityZone: reconcile seats, remove stale records, fix broken policy assignment and keep coverage at 100%.

• Build a single licence and renewal register across Microsoft 365, Google Workspace, security tooling, collaboration tools and AI platforms - with owners, costs and renewal dates.

• Manage supplier relationships and renewals, and give the business real visibility of IT spend.

• Support security awareness, phishing reporting and mail filtering hygiene.

Service desk & self-sufficiency

• Be the first responder for company-wide IT requests, with clear response expectations and no request left unanswered.

• Replace tribal knowledge with a documented knowledge base and runbooks covering the fixes we repeat most.

• Introduce lightweight request tracking so we can see volume, categories and recurring causes rather than reacting message by message.

• Work with our AI tooling to automate first-line triage for the common, well-understood requests - we already have a Claude agent in the support channel and want it doing more.

• Support the Galway office environment and our remote colleagues across the UK and Europe.

Handover & exit

• Leave the function documented, automated where sensible, and ready to transfer to a permanent hire or managed service provider.

• Make a clear, evidenced recommendation on the long-term IT operating model for a company of our size and trajectory.

We value, recognise and reward our people

• A role with real scope, where your impact is visible, your salary is reviewed as we grow, and there are career progression opportunities as the company scales and internationalises.

• Comprehensive health and life insurance through Laya Healthcare in Ireland and Aviva in the UK.

• Flexible working with hybrid working as the default in Ireland, core hours of 10am to 4pm, remote options depending on role and a work abroad programme of up to 6 weeks.

• 25 days annual leave from day one, increasing by half a day per year of service, plus company days off, a half day before public holidays and an end of year shutdown.

• Enhanced family leave, including 6 months fully paid maternity leave and 3 weeks paid paternity leave after 18 months’ service (and wedding leave!)

• And on top of all of this, the usuals done well. A matching pension scheme that increases with service, paid sick leave, bike to work scheme, wellbeing supports, and an employee referral programme with rewards of up to €4,000 (or equivalent) per referral.

#LI-Hybrid