IT & Security Manager

Job description

## **🌟 Who We Are Looking For** Good with Macs, serious about security and keen to build something great? We are looking for an **IT & Security Manager** to take ownership of CorePlan’s internal IT and security foundations as we grow globally. CorePlan is a Perth-born SaaS company shaking up the mining industry with our digital drilling management platform. We replace paper and spreadsheets with connected workflows used by customers around the world. You will help our crew work securely and effectively, keeping everyday IT running smoothly while strengthening our security and compliance program. Reporting to the **CFO** on compliance, budget and risk, and working closely with our **CTO** on technical architecture and cloud security, you will combine hands-on problem-solving with bigger-picture thinking. There is plenty to own and plenty of room to make your mark. ## **🛠 What Will You Do?** - **Keep our crew connected:** Manage our predominantly Mac device fleet, support employees and improve self-service guidance. - **Own identity and access:** Administer Microsoft 365 and Google Workspace, including MFA, conditional access, licences and access reviews. - **Strengthen our defences:** Implement and monitor security controls, logging and alerts across our internal IT and AWS environments. - **Keep compliance moving:** Support SOC 2 and ISO 27001 requirements, maintain documentation and coordinate penetration testing. - **Be ready when it counts:** Lead incident response and business continuity planning, and manage security threats. - **Make smart technology choices:** Assess new software, integrations and vendors for security risks. - **Cut the admin:** Automate onboarding, offboarding and device management alongside our People team. - **Build security confidence:** Support customer security questionnaires and run practical security awareness sessions for our global crew. ## **🙌 Qualifications and Fit** You know your way around a Mac-first environment and can explain security without making everyone’s eyes glaze over. You will bring: - A relevant qualification in IT, Computer Science or Cyber Security, or equivalent professional experience. - Hands-on Jamf Pro experience, including smart groups, policies, configuration profiles, Self Service and Automated Device Enrollment. - Strong macOS knowledge, including FileVault key escrow, account recovery and device lockout troubleshooting. - Scripting skills in zsh, bash or Python to automate workflows. - Experience administering Google Workspace, Microsoft 365 and endpoint security tools such as CrowdStrike Falcon. - Practical SOC 2 or ISO 27001 experience, ideally with a compliance platform such as Drata. - A service-focused mindset, clear communication and the ability to prioritise when things get busy. **A few handy extras:** Relevant security certifications, AWS security expertise, or experience in a scaling SaaS company or the resources sector. ## **💎 Our Culture** Our best crew members are excited about building a great company. We take ownership, ask questions, share feedback and back each other. Here is what forms part of our DNA: - **First Principles Thinking:** We believe in breaking down and understanding problems into their most basic parts. When we eat elephants, we do it one bite at a time. - **LFG:** We set high goals and ruthlessly prioritise to hit them. We push ourselves to act from first principles, speak up as we care about each other as humans and embrace feedback to win as a team. - **Infectious Passion:** We highly value team members who love the career path they’ve chosen and strive for mastery. We embrace the excitement of overcoming challenges, and growth. If you are driven and love what you do, you’ll thrive here, - **Yes:** We’re firm believers that we ‘can do’ until someone shows us the ‘can’t’. It’s funny how often the really gnarly problems are busted by folks who had no clue they were supposed to be unsolvable. - **Create, Launch, and Evolve:** Creation is the spark of learning. Launch it internally, engage with customers, gather feedback, and evolve. We focus on inputs - what we can control - which ultimately drives outcomes. ## **🚀 How to Apply** Ready to roll up your sleeves and join the CorePlan crew? **Apply with your CV and cover letter letting us know what you can bring to the ream.** Questions? Drop us a line at [careers@coreplan.io](http://coreplan.io) *Recruitment agencies: We appreciate your hustle, but we are managing this role directly. To get on our radar for future opportunities, email* [careers@coreplan.io](http://coreplan.io)