IT Operations & Security Manager

About H: H exists to push the boundaries of superintelligence with agentic AI. By automating complex, multi-step tasks typically performed by humans, AI agents will help unlock full human potential. H is hiring the world’s best AI talent, seeking those who are dedicated as much to building safely and responsibly as to advancing disruptive agentic capabilities. We promote a mindset of openness, learning, and collaboration, where everyone has something to contribute. Our role: Key Responsibilities: - Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance. - Ensure secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness. The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation. Requirements Identity & Access Management - Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP) - Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications - Hands-on experience performing user access management, including joiner/mover/leaver workflows - Experience conducting periodic access reviews and least-privilege audits Cloud & Infrastructure Access - Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential Device & Endpoint Management - Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM - Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs - Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar) Compliance & Security - Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership - Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus - Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance Vendor Management - Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding - Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments) - Ability to track license utilization and right-size seats to control spend - Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments - Maintains an up-to-date vendor inventory and renewal calendar Automation & Scripting - Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks - Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus Nice to Have - Experience with Linear for IT ticketing and intake workflows - Familiarity with Vanta for continuous compliance monitoring and evidence automation - Prior experience at a startup or fast-growing company where IT scope spans helpdesk, security, and compliance Soft Skills - Strong documentation habits — runbooks, SOPs, and onboarding guides - Ability to translate technical controls into clear language for non-technical stakeholders - Comfort owning end-to-end projects with minimal oversight Location: - Paris - This role is hybrid, and you are expected to be in the office 3 days a week on average. What We Offer: - Join the exciting journey of shaping the future of AI, and be part of the early days of one of the hottest AI startups. - Collaborate with a fun, dynamic, and multicultural team, working alongside world-class AI talent in a highly collaborative environment. - Enjoy a competitive salary. - Unlock opportunities for professional gro