IT and Information Security Administrator (London)

Location: London Office
Schedule: Full-Time

 

No asset left behind

Asset Reality provides the system of record for assets held under legal authority. Law enforcement agencies, prosecutors, asset recovery offices, treasuries and insolvency practitioners use the Asset Reality Platform to record every asset in their care, physical or digital, with Asset Reality Custody and Asset Reality Realisation available on top. Our aim is to make asset recovery simpler, so that more of it takes place.

 

About the role

You will co-administer the apps, accounts, systems, laptops and phones that Asset Reality’s employees use every day, keeping them well managed and secure. Our clients are law enforcement and government agencies, and our staff work with material from real investigations and court orders. A compromised device, account or system puts that work at risk. 

You will co-manage our IT and information security systems with the Head of IT and Information Security, to whom you will report, with day-to-day responsibility for Microsoft 365, Entra ID, Intune, Defender, Google Workspace, our device management platform and our wider software estate. As the company and the department grow, the range of systems you support will grow too.

You will be trusted to work independently across all of these areas. Your manager shares the workload with you, and you with them, so that together you keep the team resilient and neither of you is a single point of failure.

You will keep our controls honest. When a control is weaker than our policies say it is, you will raise it with your manager, with evidence, and help fix it. Changes to custody systems and their approval rules are owned and approved by others, which protects you as much as the assets.

 

The impact you will have

Systems and devices

• Endpoint management: Co-manage our device management platforms, including Intune, day to day for our Windows and macOS laptops, company iPhones and other endpoints, covering enrolment, compliance, configuration and application deployment.

• Device and user policies: Configure and maintain security and configuration policies across our devices, accounts and platforms, including our device management platform, Microsoft and Google, covering areas such as encryption, screen lock, passwords, firewall, software and update controls, and browser settings, aligned with recognised security baselines.

• Patching: Keep operating systems, applications and browsers up to date, within the timescales required by our policies and certifications, including ISO 27001, SOC 2 and Cyber Essentials Plus, etc.

• Device lifecycle: Co-manage devices from ordering and enrolment to secure wiping and certified disposal, and keep our asset inventory accurate.

• Microsoft 365 administration: Administer Exchange Online, SharePoint, OneDrive and Teams, along with licensing, groups, enterprise applications and single sign-on, and Microsoft Purview controls such as retention and data loss prevention.

• Wider platforms: Help manage our other IT and security platforms, such as our password manager and compliance platform. As our tools evolve, you will learn new systems as they are adopted, with training provided.

• Office network: Keep our office network secure and well maintained, including Wi-Fi, firewall and internet connectivity, with guest access kept separate from company systems.

• Physical security: Co-manage our physical access control system, including access for joiners, movers and leavers and regular reviews of access logs.

• Backup and recovery: Co-manage our Microsoft 365 backup and prove it works through regular restore tests.

 

Identity and access

• Identity management: Administer Microsoft Entra ID, including Conditional Access, multi-factor authentication and privileged roles, applying least privilege through time-limited administrative access that is approved and reviewed regularly.

• User lifecycle: Co-manage user accounts, groups and access across our systems, ensuring people have the access they need from their first day and that it is removed in full when they leave, in line with our offboarding process.

• Certificates and renewals: Co-manage certificates, tokens and renewals across our systems, including Apple push certificates and tokens, SSL/TLS certificates, software licences and subscriptions, and maintain the renewals calendar for our IT and security services.
   
   

Security operations

• Detection and response: Co-manage Microsoft Defender across endpoints, email and identity, and act as first responder when an alert requires action.

• 24/7 monitoring: Act as secondary contact for our 24/7 security operations centre, reviewing its alerts and reports and helping to investigate and contain threats.

• Incident escalation: Report any emergency or critical incident promptly to the Head of IT and Information Security, the Chief Operating Officer and the Chief Product and Technology Officer, in line with our incident response process.

• Vulnerability management: Help track and fix vulnerabilities, such as those found through security scans and tests.

• Exercises and runbooks: Help run incident response and business continuity exercises, and keep the related runbooks up to date.