Head of IT & Information Security Operations

We're looking for a Head of IT & Information Security Operations who's ready to become the practical owner of everything that keeps our internal systems, access, devices, and security running like clockwork. If you believe that a clean access list is a thing of beauty and "we'll document it later" makes you twitch a little, this might be your next co-op mission.

• Build and maintain a single registry of systems, services, and SaaS tools: owners, admins, users, plans, renewals, MFA/SSO, and offboarding flow, all in one place;
• Own the access lifecycle end-to-end: onboarding, offboarding, role changes, and regular access reviews, so nobody keeps a key to a door they don't need anymore;
• Lead the IT Admin/MSP: set priorities, review quality of work, keep SLAs honest, and yes, keep an eye on the admin's own access too;
• Level up our password manager, MFA/2FA, admin access, shared credentials, and break-glass access setup;
• Bring order to our device fleet: inventory, MDM, encryption, screen lock, updates, remote lock/wipe, and local admin rights;
• Map out where the important stuff actually lives and who can touch it: HR, Finance, Legal, Product, Support, Anti-Fraud, Data, and Engineering;
• Team up with Finance to keep SaaS/vendor spend in check: licenses, unused seats, duplicate tools, costs, and security capabilities;
• Set up a real incident response flow for lost devices, compromised accounts, leaked passwords, wrong sharing, and malware/data leak suspicion, no improvising in the moment;
• Check that backups, recovery, and continuity actually work for our critical systems and data (not just look good on paper);
• Hunt down repetitive manual processes and automate them via the IT Admin/approved tools: n8n, Make, Google Apps Script, and internal scripts;
• Support the security side of internal policies: access rules, device rules, AI use, incident response, and password/MFA/admin access;
• Prepare evidence and processes for payment partner requirements: MFA, access control, device baseline, incident process, and data handling.

• 4+ years of experience in internal IT, corporate IT, information security operations, IT governance, or a similar role; 
• Experience in e-commerce, product, fintech, payments, iGaming/gambling, or another payment-sensitive industry; 
• Solid understanding of IAM, SSO, MFA, RBAC, and the full privileged access lifecycle; 
• Hands-on experience with Google Workspace, Slack, password managers, and common SaaS administration; 
• Understanding of MDM and baseline protection for macOS/Windows devices; Experience building onboarding/offboarding/access review processes from the ground up; 
• Experience managing an IT Admin, MSP, or technical contractors; Understanding of incident response, backups, and recovery basics; 
• Strong documentation habits, you keep registries and checklists actually up-to-date, not just created once and forgotten; 
• Strong ownership, structured thinking, and the ability to align with different departments without turning it into a negotiation marathon.

• Practical understanding of PCI DSS, ISO 27001, GDPR, or NIST; 
• Experience going through security questionnaires from payment partners or vendors; 
• Experience with DLP, EDR, SIEM, or vulnerability management; 
• Understanding of AppSec/secure SDLC basics; 
• Experience automating workflows via n8n, Make, Zapier, Google Apps Script, or internal tools; 
• Experience owning SaaS/vendor spend, renewals, licenses, and unused seats; 
• Experience implementing MDM from scratch.

• Spontaneous weekend from the CEO;
• Support for professional development, including events (we went on a MAJOR trip to Copenhagen, for example), certifications, and educational materials;
• Start working at a time that’s comfortable for you;
• People Partner who will always support you in word and deed;
• Anniversary and performance bonuses;
• Input on project direction in a bureaucracy-free environment;
• Regular performance reviews and personal feedback sessions;
• 20 paid vacation days and 7 sick leave days;
• Assisting with the accounting and tax management for individual entrepreneurs;
• English language and Well-being benefit — so that you can improve your mental health the way you want;
• No time tracking;
• We purchase CHARGING STATIONS for our spacers;
• We help Ukraine: every month the company supports AFU and transfers donations for ammunition and supplies.