217 Jobs in Doncaster

Job Title: IT & Security Manager

Reporting to: Senior Technology Services Manager

Salary Range: £50,000 - £55,000 per annum

Contract Type: Permanent

Location: Hybrid from London or Sheffield

Hours/Days per week:   35 hours per week, 9 AM – 5 PM, Monday - Friday  

Purpose of the Job

The IT and Security Manager is the technical lead for Felix's infrastructure, devices and information security. The role keeps the systems our colleagues rely on every day secure, reliable and well supported, from laptops in our offices to the handheld devices and label printers used in our warehouses.

Reporting to the Senior Technology Services Manager, you will lead a small team of two System Administrators. This is a hands-on role: around 70% of your time will be spent on technical work and around 30% on leading and developing the team. You will be Felix's specialist in information security. The Senior Technology Services Manager provides oversight of security, and the Head of Technology, who is Felix's Data Protection Lead, remains accountable for it. Both will rely on your expertise, judgement and advice to understand risks and make good decisions.

You will work closely with the Service Manager, who owns the service desk and its processes, acting as the technical escalation point for infrastructure, device and security issues. You will join a technology team of around twelve, working alongside colleagues in service management, business applications, data and Dynamics, at a time when the team is strengthening how it delivers technology services and preparing Felix to use AI tools such as Microsoft Copilot safely.

Duties and Responsibilities

Your normal duties and responsibilities will be set out in your job description. However, the charity may require you to perform other duties from time to time.

Infrastructure and devices

• Manage and maintain Felix's cloud only Microsoft 365 environment, including Entra ID, Intune, and SharePoint and Teams administration and governance.
• Manage Windows laptops and desktops and rugged Android warehouse devices across their full lifecycle, from purchase and setup through to secure disposal, and help shape Felix's approach to managing Android devices.
• Own the infrastructure Felix's warehouse management system runs on, including handheld devices, label printers and site connectivity.
• Diagnose and troubleshoot network, firewall and connectivity issues across offices and warehouses, raising and following through changes with Felix's managed network supplier.
• Look after telephony, meeting room audio visual equipment, and office and warehouse printing.
• Act as the technical escalation point for infrastructure, device and security issues raised through the service desk, working with the Service Manager, who owns the service desk and its processes.
• Manage and regularly test Microsoft 365 backup, disaster recovery and business continuity arrangements for the systems in your area.

Access and accounts

• Set the approach and plan for joiner, mover and leaver processes, volunteer access, shared devices in warehouses and kitchens, and Microsoft 365 licence management, delegating day to day delivery to the System Administrators where appropriate.
• Use Power Automate or other low-code tools to automate routine account and device tasks where it saves time and reduces errors.

Information security

• Lead Felix's Cyber Essentials and Cyber Essentials Plus certification, keeping controls and evidence in place all year round.
• Configure and manage Microsoft security tools, including Defender for Endpoint, Defender for Office 365, Conditional Access and multi-factor authentication, and Purview data loss prevention, retention and sensitivity labels.
• Monitor and respond to security alerts, and develop a proper security monitoring framework for Felix.
• Act as technical lead for security incidents, from investigation and containment through to recovery and lessons learned, and maintain incident response playbooks.
• Run vulnerability management, including patching and the remediation of findings from penetration tests.
• Run security awareness activity, including phishing simulations and targeted training for colleagues.
• Secure Microsoft 365 for Copilot and other AI tools, managing permissions, reducing oversharing and applying sensitivity labels.
• Plan and implement improvements to security controls, applying recognised frameworks and guidance such as Zero Trust and NCSC guidance, and maintain a security improvement plan for your area.
• Complete security questionnaires from funders, partners and corporate donors.
• Act as the security specialist for the Senior Technology Services Manager, the Head of Technology and the wider team, giving clear advice on risks and how to manage them.
• Provide technical support to the Data Protection Lead, including investigating data breaches, managing access controls and deleting data across systems when required.

Essential Criteria

• Proven hands-on experience managing a cloud-based Microsoft 365 environment, including Entra ID, Intune, SharePoint and Teams.
• Strong practical experience of Microsoft security tools, including Defender for Endpoint, Defender for Office 365, Conditional Access and multi-factor authentication, and Purview.
• Experience of managing and securing Windows devices and Android mobile devices at scale.
• Solid networking fundamentals, with experience of diagnosing network and connectivity issues and working with managed network suppliers.
• Experience of achieving and maintaining Cyber Essentials or Cyber Essentials Plus.
• Experience of leading the technical response to security incidents, and of managing vulnerabilities and penetration test remediation.
• Knowledge of how to secure Microsoft 365 for Copilot, including permissions, oversharing and sensitivity labels.
• Experience of line managing or leading a small technical team.
• A recognised security certification, such as CompTIA Security+, or a higher level certification such as CISSP or CISM.
• A good understanding of data protection requirements and the technical controls that support them.
• Clear written and verbal communication skills, including with non-technical audiences.