Job Description:

Our client, a growing engineering company, is looking for an IT & Cybersecurity Executive to take full ownership of the company's IT infrastructure and cybersecurity program. This is a rare opportunity to build a company's entire IT and security foundation from the ground up, at a business scaling rapidly over the next year.

The Opportunity:

You will take the lead in administering the company's Microsoft 365 environment and driving the organization toward ISO/IEC 27001:2022 certification. You will operate with genuine autonomy, reporting to the R&D Manager with direct visibility to the General Manager, and will eventually run the IT & cybersecurity function independently.

The Day-to-Day:

Administer and secure the company's Microsoft 365 environment (identity & access, endpoint protection, data protection, email security, collaboration tools)

Lead the ISO/IEC 27001:2022 certification process — documentation, risk assessments, internal audits, and coordination through to external certification

Build and operationalize a company-wide security policy framework

Manage endpoint and network security operations, working alongside an external IT service provider

Provide day-to-day IT support to the wider team as the organization scales

Your Qualifications:

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or related discipline

5–8 years of relevant experience, with at least 3 years hands-on in IT/cybersecurity

Hands-on experience administering Microsoft 365 (security and compliance features)

Genuine, hands-on experience with ISO/IEC 27001 or equivalent ISMS implementation strongly preferred

Comfortable operating as a solo IT/security function with full ownership, or coming from a start-up/scale-up environment

No specific industry background required — we welcome applicants from all sectors

Relevant certifications (SC-900, AZ-104/MS-102, SC-200, Security+/CySA+, CISSP Associate/SSCP, ISO 27001 Lead Implementer/Internal Auditor, ITIL 4) are advantageous but not mandatory

Why This Role:

Genuine end-to-end ownership of IT & cybersecurity — not one of many IT staff in a large team

Backed by an established group with a proven track record, not an unproven startup

Ground-floor opportunity as the company scales significantly over the next year

Exposure to prestigious clients and enterprise-grade security standards

Competitive remuneration package with room to reward candidates with strong ISO 27001 experience

Direct reporting line and visibility to senior leadership

Lead a resume-defining project — driving an ISO 27001 certification from the ground up