Lead IT Specialist
Job description
About the role
Later is the world's most intelligent influencer marketing company, built to give brands the confidence to create unforgettable campaigns. By combining real creator relationships, trusted intelligence, and expert guidance, Later removes fear and guesswork from one of marketing's most visible investments. The Lead IT Specialist will own and evolve corporate IT systems, access, and security at a senior level, ensuring infrastructure supports secure and scalable growth. This role is not a "tickets all day" position; it is a high technical role that remains closely aligned with planning, architecture, and execution. You will build secure, well-governed systems and third-party integrations across identity and access, endpoint management, device compliance, and core productivity platforms such as Google Workspace. You will serve as the technical owner for IT foundations that support SOC2 and ISO readiness, secure access, reliable onboarding and offboarding, and consistent device compliance across an expanding organization.
Key facts
What you'll do
Participate actively in the IT technical roadmap across identity, endpoint security, access governance, and core corporate systems.
Partner with Security and Infrastructure teams to ensure SOC 2 Type II and ISO 27001 controls are operational and continuously maintained.
Establish and enforce standards for device compliance, access management, and SaaS lifecycle from intake through review, onboarding, and offboarding.
Drive adoption of scalable patterns such as SSO-first, least privilege, automated lifecycle management, and measurable compliance outcomes.
Oversee governance of IT equipment in company offices, including equipment in conference rooms, entrance doors, and security cameras.
Own Google Workspace administration end-to-end, including org policies, groups, security settings, audits, and access hygiene.
Lead Identity and Access Management initiatives covering SAML, SCIM provisioning, group-based access control, and application access patterns.
Manage device endpoint management at scale using Kandji or Jamf for Mac and Intune for Windows, enforcing device policy, OS updates, encryption, malware protection, and reporting.
Build and maintain operational automation through BetterCloud or SaaS Manager workflows for onboarding, offboarding, group membership, and access reviews, supplemented by scripted automation where appropriate.
Own core security hygiene within IT, including account lifecycle management, joiner/mover/leaver processes, device inventory accuracy, compliance dashboards, and audit evidence collection.
Support vendor and tool governance by maintaining software inventory as both administrator and business owner, and providing input for vendor classification and risk reviews in partnership with Security and Legal.
Collaborate with Infrastructure and DevOps teams to align on controls, identity design, and incident readiness.
Work with Human Resources and People Operations on onboarding and offboarding policies, tool configuration, and rollout communications.
Coordinate with Finance and Procurement on renewals, licensing discipline, and cost visibility related to IT systems and SaaS usage.
Requirements
Demonstrate experience owning and evolving corporate IT systems, access, and security at a senior technical level.
Show ability to build secure, well-governed systems and third-party integrations across identity, access, endpoint management, and core productivity platforms.
Have strong familiarity with SOC 2 Type II and ISO 27001 concepts and the ability to translate these into operational controls and evidence.
Possess expertise in Google Workspace administration, including org policies, groups, security settings, audits, and access hygiene.
Bring hands-on experience with Identity and Access Management, including SAML, SCIM provisioning, group-based access control, and application access patterns.
Show competence in device endpoint management at scale, including configuration and oversight using Kandji or Jamf for Mac and Intune for Windows.
Have a track record of building and maintaining operational automation for onboarding, offboarding, group management, and access reviews.
Demonstrate strong attention to audit evidence, clean documentation, and repeatable processes for IT controls and compliance.
Nice to have
Only if the source specifies preferred items; none are listed in the provided source.
Practical notes
No compensation details are included in the source, so this section is omitted.
Apply deadlines and specific visa sponsorship information are not mentioned in the source.