IT Infrastructure & Security Manager

Key Responsibilities Design, segment, and administer the corporate network, including strict isolation between researcher lab environments, general corporate systems and guest/remote access. Own endpoint security, patch management, backup and disaster recovery for the entire company. Manage identity and access management (IAM), least-privilege access controls, and secure handling of client-confidential research artefacts and embargoed vulnerability data. Administer core infrastructure: on-prem and/or cloud servers, virtualization (e.g. VMware/Hyper-V), VPN, firewalls, Wi-Fi, storage and email/collaboration platforms. Oversee cloud infrastructure (AWS/Azure), including cloud security controls and cost/usage management. Develop and maintain disaster recovery plans to ensure business continuity, alongside routine backup operations. Establish and enforce IT security policy, acceptable use policy and onboarding/offboarding procedures across a mixed on-site and remote workforce. Support secure remote access for distributed team members (including remote cybersecurity researchers) without compromising lab integrity. Act as the internal escalation point for IT issues and evaluate when a dedicated IT Support hire is warranted as the team grows. Maintain an asset inventory and manage procurement and vendor relationships for hardware, software licences and security tooling. Run internal security hygiene initiatives — phishing simulations, access reviews, logging/monitoring — and report risk posture to leadership. Work toward and help maintain alignment with recognised governance and compliance frameworks (e.g. ISO 27001), including supporting internal/external audits as the company's client base increasingly expects this. Requirements 5+ years in network administration or IT infrastructure management, ideally including some exposure to a security-conscious or research-driven environment. Strong hands-on experience with network segmentation, firewalls, VPNs and enterprise Wi-Fi. Hands-on experience with virtualization (Proxmox/VMware/Hyper-V) and cloud platforms (AWS and/or Azure), including basic cloud security and cost management. Solid understanding of IAM, endpoint protection and backup/disaster recovery planning. Comfort working directly with a technical, security-savvy user base who will ask hard questions. Ability to work independently and build IT policy and process where little currently exists. Relevant certifications (e.g. CompTIA Network+/Security+, CCNA, cloud provider certifications, or equivalent). Experience supporting a hybrid on-site/remote technical team. Exposure to governance/compliance frameworks such as CTM, ISO 27001 and supporting internal or external audits. Familiarity with the operational needs of a security research or red-team environment (isolated lab networks, malware/exploit handling hygiene, secure data rooms).