IT Manager Cambridge, MA (On-Site)

About the Role

We’re hiring an IT Manager to own the systems and security foundations the whole organisation runs on. This work has been handled informally by people for whom it’s a secondary responsibility, and this role brings it under one dedicated owner for the first time. You’ll report to the Director of Operations and work closely with security and infrastructure leads across the business.

You’ll be joining at a formative moment. Because this role hasn’t existed as a dedicated position before, you’ll have real freedom to shape how it operates. Some of the work is strategic: shaping the security baseline, guiding decisions that cut across teams, and moving our ISO 27001 posture from something maintained in fragments to something coherent.

Some of it is foundational: keeping devices secure, platforms well configured, and incidents handled calmly.

How You’ll Spend Your TimeConfigure and secure the SaaS platforms the whole organisation runs on, including Google Workspace, Slack, Linear, Benchling, 1Password, and our LLM tooling.

Manage our fleet of MacBooks through MDM, endpoint security, and patching, balancing strong protection with staff productivity.

Own the IT that keeps our offices running: WiFi, networking, access control, printers, AV.Build backup and disaster recovery we can actually rely on, with real retention and real restore tests.

Set the security baseline for the systems you own, and work with staff on trade-offs between stronger protection and organisational speed.

Maintain our ISO 27001 certification and coordinate the pieces that touch infrastructure.

Own incident response for the systems you’re responsible for, and coordinate wider response when an incident spans systems.

What We’re Looking ForExperience administering and securing SaaS environments, especially Google Workspace, including identity, access, and SSO.Experience managing and securing a fleet of macOS devices: MDM, endpoint security, patching.

Working knowledge of office networking and physical access systems, or the ability to ramp up on them quickly.A practical security mindset: familiarity with common threats and the ability to reason about risk against operational cost, not just apply best practice by default.

Genuine comfort with ambiguity and willingness to work across the whole scope. You’ll have clear authority in some areas and need to influence without it in others, often with technically minded colleagues.

Nice to HaveExperience in a small or fast-growing organisation where you covered a wide range of responsibilities.

Hands-on experience operating a formal security framework such as ISO 27001 or SOC 2, including supporting external audits.

Experience working with an external security consultant or managed security provider.

Comfort with light scripting and automation, including modern LLM tooling.

Experience running incident response and leading post-incident reviews.

LogisticsLocation: in-person in Cambridge, Massachusetts. Given the amount of device and physical office work involved, this is genuinely in person.

Reports to: Director of Operations.

Status: full-time employee.