IT & Cybersecurity Senior Executive

Our client, a growing engineering company, is looking for an IT & Cybersecurity Executive to take full ownership of the company's IT infrastructure and cybersecurity program. This is a rare opportunity to build a company's entire IT and security foundation from the ground up, at a business scaling rapidly over the next year.

The Opportunity:

You will take the lead in administering the company's Microsoft 365 environment and driving the organization toward ISO/IEC 27001:2022 certification. You will operate with genuine autonomy, reporting to the R&D Manager with direct visibility to the General Manager, and will eventually run the IT & cybersecurity function independently.

The Day-to-Day:

• Administer and secure the company's Microsoft 365 environment (identity & access, endpoint protection, data protection, email security, collaboration tools)
• Lead the ISO/IEC 27001:2022 certification process — documentation, risk assessments, internal audits, and coordination through to external certification
• Build and operationalize a company-wide security policy framework
• Manage endpoint and network security operations, working alongside an external IT service provider
• Provide day-to-day IT support to the wider team as the organization scales

Your Qualifications:

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related discipline
• 5–8 years of relevant experience, with at least 3 years hands-on in IT/cybersecurity
• Hands-on experience administering Microsoft 365 (security and compliance features)
• Genuine, hands-on experience with ISO/IEC 27001 or equivalent ISMS implementation strongly preferred
• Comfortable operating as a solo IT/security function with full ownership, or coming from a start-up/scale-up environment
• No specific industry background required — we welcome applicants from all sectors
• Relevant certifications (SC-900, AZ-104/MS-102, SC-200, Security+/CySA+, CISSP Associate/SSCP, ISO 27001 Lead Implementer/Internal Auditor, ITIL 4) are advantageous but not mandatory

Why This Role:

• Genuine end-to-end ownership of IT & cybersecurity — not one of many IT staff in a large team
• Backed by an established group with a proven track record, not an unproven startup
• Ground-floor opportunity as the company scales significantly over the next year
• Exposure to prestigious clients and enterprise-grade security standards
• Competitive remuneration package with room to reward candidates with strong ISO 27001 experience
• Direct reporting line and visibility to senior leadership
• Lead a resume-defining project — driving an ISO 27001 certification from the ground up