IT Systems & Cybersecurity Lead

About the Role

The IT Systems & Cybersecurity Lead is the company's single point of ownership for technology. You will keep our remote contractor laptop fleet and Microsoft 365 environment secure and running, act as technical owner of our ISO/IEC 27001:2022 certified information security management system, and maintain the internal web applications our operations, HR and account management teams use every day. This is a hands-on lead role in a small team: you will configure systems, review and write code and handle escalated support yourself, while setting direction and managing one IT/Cybersecurity Specialist. You will inherit a documented, working environment with a full handover.

Responsibilities

∙ Manage the remote contractor laptop fleet through RMM/MDM and EDR tools, including policies, patching, alerts and remediation

∙ Own the device lifecycle from specification and provisioning through to recovery and secure wipe, tracked in our in-house asset system

∙ Maintain endpoint hardening standards, including local admin lockdown, LAPS and CIS-aligned baselines

∙ Produce the weekly cybersecurity report and remediation log for leadership

∙ Administer Microsoft 365 and Entra ID as Global Administrator, covering users, licences, MFA, SSPR, Conditional Access and shared mailboxes

∙ Maintain email security and deliverability (SPF, DKIM, DMARC) across company domains

∙ Run joiner, mover and leaver processes with HR, including timely access removal on offboarding

∙ Act as technical owner of the ISO/IEC 27001:2022 ISMS, covering controls, evidence, internal audits and corrective actions, and lead preparation for surveillance audits

∙ Maintain data protection records for security and monitoring tools under Singapore PDPA and Sri Lankan data protection obligations, and support client security questionnaires

∙ Own, maintain and extend our internal web applications, including code reviews, dependency and security updates, hosting, databases and DNS

∙ Specify and purchase hardware and software within approval limits, and manage SaaS subscriptions, renewals and vendors

∙ Supervise and develop the IT/Cybersecurity Specialist, provide escalated IT support, and advise the COO and CEO on technology risk, budget and roadmap

Requirements

∙ An undergraduate or graduate degree in Computer Science, Information Technology or Cybersecurity, or equivalent professional experience

∙ A recognised security or cloud certification (e.g. Microsoft SC-300, MS-102 or AZ-500, CompTIA Security+, or ISO 27001 Lead Implementer or Lead Auditor) is advantageous

∙ 4+ years in IT systems administration, security operations or a combined IT/development role, including at least 1 year owning systems end to end

∙ Hands-on Microsoft 365 and Entra ID administration, including licensing, MFA, Conditional Access, Exchange Online and email authentication (SPF, DKIM, DMARC)

∙ Experience running an RMM/MDM platform and an EDR console across a distributed, remote fleet

∙ Working software development skills, including reading, fixing and extending a web application, using Git and pull-request reviews, and writing SQL

∙ Practical knowledge of an information security framework such as ISO 27001, SOC 2 or NIST CSF, including producing audit evidence

∙ Hands-on experience with Microsoft 365, Entra ID, Exchange Online, SharePoint, Teams, NinjaOne, Bitdefender GravityZone, Entra LAPS, 1Password Business, GitHub, PostgreSQL/Supabase, Render and Cloudflare DNS, or comparable tools

∙ Experience with TypeScript or JavaScript web frameworks and PaaS hosting is advantageous

∙ Experience in legal services, professional services or another regulated, client-audited industry is advantageous

∙ Familiarity with Singapore PDPA and the Sri Lanka Personal Data Protection Act is advantageous

∙ Experience supervising or mentoring a junior technician or analyst, and using AI and automation to run a lean IT function, is advantageous

∙ Clear written English for policies, documentation, leadership updates and client security responses

Benefits

∙ Direct employment with Teams Squared

∙ Competitive salary at market-standard rates

∙ Exposure to a broad range of IT, cybersecurity and compliance matters

∙ Professional development and ongoing training support

∙ Long-term career growth opportunities within a respected firm

Applications are being managed by Teams Squared. Only shortlisted candidates will be contacted.