IT Systems & Compliance Manager

CitySwift; Galway; Hybrid; EUR 65,000 - 101,000; Full time

Benefits offered by this job

Health & life insurance

Hybrid work

25 days annual leave

Family leave

Pension scheme

Wellbeing supports

Employee referral programme

Job summary

CitySwift is seeking a hands-on IT contractor to own day-to-day IT operations in Galway, helping to achieve ISO 27001 Stage 1 and 2 readiness. You will manage our mixed Mac and Windows fleet, Google Workspace and Microsoft 365, and build runbooks for repeatable processes.

Onsite presence is required at least 3 days per week with a hybrid setup; you will implement identity management, endpoint security, asset tracking and vendor governance while preparing clear evidence for audits and continuous

Qualifications

• See above items under qualifications and tools to manage IT systems and security.
• All activities relate to maintaining ISO 27001 Stage 1 and Stage 2 readiness.

Responsibilities

• Own device fleet management for Mac and Windows, including provisioning and secure wipe.
• Build and maintain runbooks and an asset inventory for audit readiness.
• Lead identity & access governance across collaboration and productivity tools.

Skills

Device lifecycle management

Endpoint security

IAM governance

Hybrid IT support

Documentation

Audit readiness

Onsite troubleshooting

AI tooling governance

Tools

Mosyle

Microsoft Intune

Entra ID

Autopilot

ABM/ADE enrolment

Google Workspace

Microsoft 365

Bitdefender GravityZone

HiBob

Job description

CitySwift is the world's leading performance optimisation platform for public transport, enabling data-driven decision-making for some of the largest transport networks globally. Backed by over €15 million in venture capital funding, we partner with major public transport operators and government authorities, including Go-Ahead Group, Transport for London, and many more.

CitySwift is experiencing accelerated growth, with 117% year-over-year revenue growth in 2025.

Our mission is to increase the adoption of sustainable public transport worldwide. Today, our platform optimises more than 3 billion passenger journeys annually, and our target is to reach 10 billion journeys by the end of 2026.

At CitySwift, you'll have the opportunity to take ownership, make a measurable impact, and grow professionally as part of a collaborative, mission-driven team. Join us in shaping the future of public transport by driving the next phase of CitySwift's growth.

About the Role

We've grown past 50 people across Ireland and the UK without a dedicated IT function, which is no longer sustainable - particularly with ISO 27001 certification underway. Today, IT support runs through Slack and largely sits with our VP of Engineering.

This hands-on contract role will take ownership of day-to-day IT while building the systems, documentation and controls to make it sustainable. You'll manage our mixed Mac and Windows fleet, identity and access across Google Workspace and Microsoft 365, endpoint security, licensing, and IT evidence for our ISO 27001 Stage 1 and Stage 2 audits. You'll also tackle current issues including device and asset management, Windows licensing, Bitdefender inventory, Teams licences, Google groups and shared drives, admin access, external sharing, and governance of growing AI tooling.

We can support a hybrid working arrangement, but you'll need to be onsite at least 3 days per week, as the role involves hands-on device setup and troubleshooting, onboarding and offboarding, managing equipment and supporting employees directly. Success means leaving behind clear runbooks, systems and controls that a fellow employee, MSP or AI-assisted support flow can take over.

Key Responsibilities

Device fleet & endpoint management

• Own the full device lifecycle: specification, procurement, enrolment, handover, support, reclaim and secure wipe.
• Administer Mosyle for the Mac fleet - ABM/ADE enrolment, configuration profiles, app deployment, Activation Lock bypass and recovery.
• Administer Microsoft Intune, Entra ID and Autopilot for the Windows fleet - hash collection, enrolment profiles, compliance policies, BitLocker and LAPS recovery.
• Standardise our hardware specification and build images so a new starter's machine is ready before their first morning, not during it.

Identity, access & joiner-mover-leaver

• Own identity and access across Google Workspace, Microsoft 365/Entra, Slack, Atlassian and our internal tooling.
• Design and run a documented joiner-mover-leaver process with HiBob as the source of truth, including approval trails and timely revocation.
• Rationalise Google groups, shared drives and external sharing so teams can collaborate with customers without ad-hoc workarounds.
• Implement least-privilege admin, break-glass accounts and MFA coverage across all core platforms.
• Deliver the IT and endpoint controls for certification, working alongside our compliance platform, external consultancy and chosen certification body.
• Build and maintain an accurate asset inventory and access register that will stand up to audit.
• Write and operationalise the IT-side policy set - acceptable use, access control, endpoint security, mobile device, backup and secure disposal - so they describe what actually happens.
• Collect and organise evidence for Stage 1 and Stage 2, support internal audit and management review, and coordinate the annual penetration test.
• Own the supplier and vendor risk register for IT and SaaS suppliers, including our AI tooling vendors.

Endpoint security & vendor management

• Take ownership of Bitdefender GravityZone: reconcile seats, remove stale records, fix broken policy assignment and keep coverage at 100%.
• Build a single licence and renewal register across Microsoft 365, Google Workspace, security tooling, collaboration tools and AI platforms - with owners, costs and renewal dates.
• Manage supplier relationships and renewals, and give the business real visibility of IT spend.
• Support security awareness, phishing reporting and mail filtering hygiene.
• Be the first responder for company-wide IT requests, with clear response expectations and no request left unanswered.
• Replace tribal knowledge with a documented knowledge base and runbooks covering the fixes we repeat most.
• Introduce lightweight request tracking so we can see volume, categories and recurring causes rather than reacting message by message.
• Work with our AI tooling to automate first-line triage for the common, well-understood requests - we already have a Claude agent in the support channel and want it doing more.
• Support the Galway office environment and our remote colleagues across the UK and Europe.

Handover & exit

• Leave the function documented, automated where sensible, and ready to transfer to a permanent hire or managed service provider.
• Make a clear, evidenced recommendation on the long-term IT operating model for a company of our size and trajectory.

We value, recognise and reward our people

• A role with real scope, where your impact is visible, your salary is reviewed as we grow, and there are career progression opportunities as the company scales and internationalises.
• Comprehensive health and life insurance through Laya Healthcare in Ireland and Aviva in the UK.
• Flexible working with hybrid working as the default in Ireland, core hours of 10am to 4pm, remote options depending on role and a work abroad programme of up to 6 weeks.
• 25 days annual leave from day one, increasing by half a day per year of service, plus company days off, a half day before public holidays and an end of year shutdown.
• Enhanced family leave, including 6 months fully paid maternity leave and 3 weeks paid paternity leave after 18 months' service (and wedding leave!)
• And on top of all of this, the usuals done well. A matching pension scheme that increases with service, paid sick leave, bike to work scheme, wellbeing supports, and an employee referral programme with rewards of up to €4,000 (or equivalent) per referral.