IT & Security Manager

Punch & Associates Investment Management, Inc.; Minneapolis (MN); On-site; USD 70,000 - 100,000; Full time

Benefits offered by this job

Competitive compensation

Discretionary bonus

Excellent benefits

Ownership in technology

Flexible in-office Edina

Job summary

Punch & Associates Investment Management, Inc. in Minneapolis seeks an hands-on IT & Security Manager to serve as the primary technology contact for staff. You’ll oversee user support, Microsoft 365 administration, and security initiatives while collaborating with an outsourced IT partner.

This player-coach role blends hands-on problem solving with strategic tech improvements. You’ll lead onboarding, manage identity and access, and help drive awareness and resilience across the firm’s technology

Qualifications

• Hands-on experience supporting day-to-day technology in a professional services environment.
• Proven ability to administer Microsoft 365 and AD/Entra ID.
• Experience with security operations and phishing awareness is preferred.

Responsibilities

• Serve as the firm's primary point of contact for day-to-day technology support.
• Implement and manage a ticketing and intake process, with clear response expectations and visibility.
• Own employee onboarding — device setup, account provisioning, access assignment.
• Support conference room AV and hybrid meeting technology so that client and internal meetings run without friction.
• Train and enable employees to maximize the use and functionality of the tools we already own.

Skills

IT Support

Microsoft 365

Active Directory

Identity & Access Management

Security Operations

Vendor Collaboration

Tools

Microsoft 365

Active Directory

Entra ID

Endpoint Protection

Email Security

Job description

Punch & Associates Investment Management, Inc. is a Minneapolis-based, independent wealth and investment management firm serving a select number of institutions and families of substantial wealth. Our mission is to enable families and institutions to steward resources with clarity and purpose.

We are looking for a hands-on, service-oriented IT & Security Manager to support the internal employee day-to-day technology experience at Punch.

This person will be our firm's primary point of contact for technology — responsible for user support, Microsoft 365 administration, and supporting our cyber security initiatives — working alongside our outsourced IT partner, who will continue to manage our network and servers. You will report to the Director of Technology, who leads technology strategy.

This is a player-coach role at a 36-person firm. We are a small team, and part of every week is spent solving problems for people who do not think about technology the way you do. The ideal candidate brings well-rounded experience spanning technology support, administration, and security, an ability to move between solving immediate problems and improving the system behind it, a genuine interest in owning technology across the broader Punch organization, and exceptional interpersonal and communication skills

Responsibilities Include, but are not limited to:

User Support & Service

• Serve as the firm's primary point of contact for day-to-day technology support
• Implement and manage a ticketing and intake process, with clear response expectations and visibility
• Own employee onboarding — device setup, account provisioning, access assignment
• Support conference room AV and hybrid meeting technology so that client and internal meetings run without friction
• Train and enable employees to maximize the use and functionality of the tools we already own

Microsoft 365, Active Directory & Identity Administration

• Administer our Microsoft 365 environment — Exchange and Outlook, Teams, SharePoint, and Entra ID
• Own identity and access management across the firm: security groups, permissions, MFA, and conditional access policies
• Bring intentionality to our configuration — document why policies exist, retire what we no longer need, and replace inherited defaults with decisions
• Manage software and license inventory, optimizing spend and eliminating unused seats
• Conduct periodic access reviews across firm systems

Security Operations

• Co-own and drive remediation of findings from the firm’s third-party information security assessment, tracking progress and reporting to the Director of Technology
• Administer and co-manage our security stack, including endpoint protection and detection, application control, email security, and email encryption
• Co-own our security awareness program, building phishing simulations and training relevant to a wealth management firm
• Support the firm's incident response program, partnering with the Director of Technology and our Compliance Officer
• Work closely with our outsourced infrastructure partner, coordinating priorities and ensuring work is tracked through to completion
• Build and maintain a complete inventory of hardware, software, and SaaS subscriptions
• Develop a hardware lifecycle and refresh plan, and make purchasing recommendations to the Director of Technology

Process, Documentation & Projects

• Document our environment — configurations and standard procedures — so that firm knowledge is shared rather than held by one person
• Establish practical change management for firm systems
• Support technology projects and implementations from planning through rollout
• Contribute to business continuity and disaster recovery planning

Required Skills and Qualifications:

User Support & Service

• Serve as the firm's primary point of contact for day-to-day technology support
• Implement and manage a ticketing and intake process, with clear response expectations and visibility
• Own employee onboarding — device setup, account provisioning, access assignment
• Support conference room AV and hybrid meeting technology so that client and internal meetings run without friction
• Train and enable employees to maximize the use and functionality of the tools we already own

Microsoft 365, Active Directory & Identity Administration

• Administer our Microsoft 365 environment — Exchange and Outlook, Teams, SharePoint, and Entra ID
• Own identity and access management across the firm: security groups, permissions, MFA, and conditional access policies
• Bring intentionality to our configuration — document why policies exist, retire what we no longer need, and replace inherited defaults with decisions
• Manage software and license inventory, optimizing spend and eliminating unused seats
• Conduct periodic access reviews across firm systems

Security Operations

• Co-own and drive remediation of findings from the firm’s third-party information security assessment, tracking progress and reporting to the Director of Technology
• Administer and co-manage our security stack, including endpoint protection and detection, application control, email security, and email encryption
• Co-own our security awareness program, building phishing simulations and training relevant to a wealth management firm
• Support the firm's incident response program, partnering with the Director of Technology and our Compliance Officer
• Work closely with our outsourced infrastructure partner, coordinating priorities and ensuring work is tracked through to completion
• Build and maintain a complete inventory of hardware, software, and SaaS subscriptions
• Develop a hardware lifecycle and refresh plan, and make purchasing recommendations to the Director of Technology

Process, Documentation & Projects

• Document our environment — configurations and standard procedures — so that firm knowledge is shared rather than held by one person
• Establish practical change management for firm systems
• Support technology projects and implementations from planning through rollout
• Contribute to business continuity and disaster recovery planning

Who we’re looking for:

Cultural fit is imperative at Punch. We value people who take their work seriously without taking themselves too seriously. We are looking for someone who:

• Is patient and service-minded - Genuinely enjoys helping people who do not think about technology the way you do, and treats a recurring annoyance as a problem worth solving
• Is proactive, not reactive - Fixes the underlying cause rather than closing the ticket, and identifies problems before they become issues
• Documents by instinct - If only one person knows how something works, that is a problem to be fixed — including when that person is you
• Communicates clearly and proactively - Keeping the team informed without being asked
• Takes ownership - Comfortable being the person the firm relies on, and equally comfortable saying when something is outside your depth
• Has a long-term mindset - Interested in building something, not just filling a seat

What we offer:

• Competitive compensation commensurate with experience. $70,000 - $100,000 salary range, plus discretionary bonus and excellent benefits package
• Participation in firm success as we grow
• A tight-knit, high-trust environment where your work is visible and directly improves how the firm operates
• Genuine ownership in our technology environment, and the latitude to make it better
• Flexible work environment with a collaborative in-office culture in Edina