IT Systems & Cyber Security Manager

About the role

Reporting to the Chief Financial Officer, the IT Systems & Cybersecurity Manager is responsible for the day-to-day management, security and ongoing development of Fernwood's technology environment. This is a hands-on, part-time role combining IT operations, Microsoft 365 administration, cybersecurity, infrastructure, technology governance and vendor management. The role will act as Fernwood's internal owner of IT and cybersecurity, ensuring systems are secure, reliable, appropriately governed and effectively support the needs of the National Support Office and broader Fernwood network.

Key responsibilities

• Manage the day-to-day IT requirements of the National Support Office, including laptops, printers, user accounts, devices and general technology support
• Administer Fernwood's Microsoft 365 environment, including Entra ID, Exchange, Teams and SharePoint
• Manage Microsoft user accounts, groups, permissions and licensing
• Administer and maintain Multi-Factor Authentication (MFA), Conditional Access, Intune, Autopilot and other Microsoft security and device-management policies
• Act as the internal owner of Fernwood's cybersecurity environment and coordinate cybersecurity activities across the business
• Monitor Microsoft Secure Score, endpoint security, vulnerabilities, security alerts and other relevant cybersecurity indicators
• Coordinate the investigation, escalation and response to cybersecurity incidents
• Oversee Fernwood's Azure environment, servers, networking, backups, monitoring and patching in conjunction with external providers where appropriate
• Manage Fernwood's ongoing relationship with external IT, telecommunications, licensing, hardware and cybersecurity providers
• Lead and support technology upgrades, system implementations and infrastructure improvements

About you

• Relevant tertiary qualification in Information Technology, Cybersecurity, Computer Science or a related discipline and/or equivalent industry experience
• Minimum 5 years' experience in an IT systems, infrastructure, IT management or similar hands-on technology role
• Strong practical experience administering Microsoft 365, Entra ID, Exchange, Teams and SharePoint
• Demonstrated experience with Microsoft security and device-management technologies including MFA, Conditional Access, Intune and endpoint security
• Working knowledge of Azure infrastructure, networking, DNS, backups and disaster recovery
• Sound understanding of cybersecurity principles, vulnerability management, access controls, incident response and security risk management
• Strong communication and stakeholder-management skills, with the ability to explain technical and cybersecurity matters clearly to non-technical stakeholders
• Proactive, practical and solutions focused, with the ability to manage competing priorities in a fast-paced environment
• High level of integrity and discretion when managing privileged access, confidential information and security matters