IT and Information Security Administrator (London)

Location: London Office Schedule: Full-Time No asset left behind Asset Reality provides the system of record for assets held under legal authority. Law enforcement agencies, prosecutors, asset recovery offices, treasuries and insolvency practitioners use the Asset Reality Platform to record every asset in their care, physical or digital, with Asset Reality Custody and Asset Reality Realisation available on top. Our aim is to make asset recovery simpler, so that more of it takes place. About the role You will co-administer the apps, accounts, systems, laptops and phones that Asset Reality’s employees use every day, keeping them well managed and secure. Our clients are law enforcement and government agencies, and our staff work with material from real investigations and court orders. A compromised device, account or system puts that work at risk. You will co-manage our IT and information security systems with the Head of IT and Information Security, to whom you will report, with day-to-day responsibility for Microsoft 365, Entra ID, Intune, Defender, Google Workspace, our device management platform and our wider software estate. As the company and the department grow, the range of systems you support will grow too. You will be trusted to work independently across all of these areas. Your manager shares the workload with you, and you with them, so that together you keep the team resilient and neither of you is a single point of failure. You will keep our controls honest. When a control is weaker than our policies say it is, you will raise it with your manager, with evidence, and help fix it. Changes to custody systems and their approval rules are owned and approved by others, which protects you as much as the assets. The impact you will have Systems and devices - Endpoint management: Co-manage our device management platforms, including Intune, day to day for our Windows and macOS laptops, company iPhones and other endpoints, covering enrolment, compliance, configuration and application deployment. - Device and user policies: Configure and maintain security and configuration policies across our devices, accounts and platforms, including our device management platform, Microsoft and Google, covering areas such as encryption, screen lock, passwords, firewall, software and update controls, and browser settings, aligned with recognised security baselines. - Patching: Keep operating systems, applications and browsers up to date, within the timescales required by our policies and certifications, including ISO 27001, SOC 2 and Cyber Essentials Plus, etc. - Device lifecycle: Co-manage devices from ordering and enrolment to secure wiping and certified disposal, and keep our asset inventory accurate. - Microsoft 365 administration: Administer Exchange Online, SharePoint, OneDrive and Teams, along with licensing, groups, enterprise applications and single sign-on, and Microsoft Purview controls such as retention and data loss prevention. - Wider platforms: Help manage our other IT and security platforms, such as our password manager and compliance platform. As our tools evolve, you will learn new systems as they are adopted, with training provided. - Office network: Keep our office network secure and well maintained, including Wi-Fi, firewall and internet connectivity, with guest access kept separate from company systems. - Physical security: Co-manage our physical access control system, including access for joiners, movers and leavers and regular reviews of access logs. - Backup and recovery: Co-manage our Microsoft 365 backup and prove it works through regular restore tests. Identity and access - Identity management: Administer Microsoft Entra ID, including Conditional Access, multi-factor authentication and privileged roles, applying least privilege through time-limited administrative access that is approved and reviewed regularly. - User lifecycle: Co-manage user accounts, groups and access across our systems, ensuring people have the access they need from their first day and that it is removed in full when they leave, in line with our offboarding process. - Certificates and renewals: Co-manage certificates, tokens and renewals across our systems, including Apple push certificates and tokens, SSL/TLS certificates, software licences and subscriptions, and maintain the renewals calendar for our IT and security services. Security operations - Detection and response: Co-manage Microsoft Defender across endpoints, email and identity, and act as first responder when an alert requires action. - 24/7 monitoring: Act as secondary contact for our 24/7 security operations centre, reviewing its alerts and reports and helping to investigate and contain threats. - Incident escalation: Report any emergency or critical incident promptly to the Head of IT and Information Security, the Chief Operating Officer and the Chief Product and Technology Officer, in line with our incident response process. - Vulnerability management: Help track and fix vulnerabilities, such as those found through security scans and tests. - Exercises and runbooks: Help run incident response and business continuity exercises, and keep the related runbooks up to date. - Travel security: Support colleagues travelling internationally, including secure remote access, preparing devices for higher-risk destinations and responding to lost or stolen devices. Governance and compliance - Audit readiness: Keep us audit-ready throughout the year across all our certifications and frameworks, including ISO 27001, SOC 2 and Cyber Essentials Plus: collect and maintain technical evidence, support internal and external audits, help close any findings, and contribute to client security questionnaires and due diligence. - Policies and processes: Own selected IT and information security policies and processes, as agreed with your manager. - Change management: Plan, test and document changes, with significant changes to security policies, Conditional Access or administrator access approved by your manager. - Supplier security: Support security reviews of new software and suppliers, and keep our software and vendor records up to date. - Security awareness: Co-manage our security awareness training and phishing simulations, track completion, and deliver security induction for new joiners. - Documentation: Document our processes, configurations and records, and keep them accurate and up to date. Support - Day-to-day support: Share day-to-day IT support with your manager. - Out-of-hours cover: Be available online to help if an urgent incident occurs outside working hours. What we are looking for We welcome applicants from diverse backgrounds and those with transferable skills from other sectors. Essential - Has administered Microsoft 365 and Entra ID in production, including Conditional Access, privileged roles, identity protection, enterprise applications and core services such as Exchange Online, SharePoint and Teams. - Has managed Windows and macOS devices with Intune or a similar device management platform, and Apple devices through Apple Business Manager with automated enrolment. - Has managed operating system, application and browser patching across a fleet of devices. - Has configured Microsoft Defender for Endpoint and Defender for Office 365, and responded to real security alerts. - Works to least privilege as a habit: time-limited administrative access, emergency (break-glass) accounts and regular access reviews. - Writes clear runbooks and records, and can turn configuration into evidence an auditor accepts. - Eligible and willing to undergo Security Check vetting. - Able to work in the office (City of London) three to five days a week, and willing to be available online outside working hours if an urgent incident occurs. Desirable - Already holds Security Check or Developed Vetting clearance. - Has supported an ISO 27001, SOC 2 or Cyber Essentials Plus audit from the technical side. - Scripting in PowerShell, and in Bash or zsh for macOS. - Has hands-on security operations experience, such as triaging alerts, investigating suspicious activity and supporting incident response. - Experience in a regulated or high-assurance environment, such as financial services, government or a digital asset custodian. - Holds Microsoft endpoint or security certifications. - Experience administering Google Workspace or other cloud platforms alongside Microsoft 365. - Has worked with a managed detection and response service or security operations centre. - Understanding of common attack techniques, for example using the MITRE ATT&CK framework. - Experience of migrating between IT or security platforms. - Experience with physical access control systems. - Experience maintaining office networks, including firewalls and Wi-Fi. How you will work - Reports to: Head of IT and Information Security. - Team: you will join our IT and Information Security team, working closely with your manager and our Security Engineer (Product). - Location: our City of London office, three to five days a week. - Out-of-hours cover: willing to be available online to help if an urgent incident occurs outside working hours. - Travel: occasional, mainly within the UK. - Vetting: given the sensitivity of the systems and data you will administer, successful completion of Security Check vetting is a condition of passing probation in this role. Asset Reality will arrange it. - Pay: £55,000 to £65,000 base salary, plus share options, benchmarked for London. - Development: training for new systems as we adopt them, and support for relevant certifications. Interviewing with Asset Reality Our process is designed to show us how you think, how you work and how you handle responsibility, and to give you a clear view of Asset Reality before you decide. - Screening call: your background, your motivation and what you are looking for in your next role. - Hiring manager interview: a deeper conversation about your experience, the work you have done and how you approach it. - Practical exercise: a session with a small panel, built around the work itself. You will work through a realistic security incident on a Microsoft 365 estate and talk us through your response. We send you everything you need to prepare in advance. - References and offer: we speak to people who have worked with you, then make an offer and talk you through it. Your hiring manager will share your interview plan and how to prepare at the start of the process. We only contact candidates from an @assetreality.com address or through our applicant tracking system, and we will never ask you to install software or run code. Life at Asset Reality The assets we work with come from real cases, and what we do with them matters to victims, to our clients and to the public. That sets the standard for how we work. - We own our work: Small teams, clear responsibilities, and no one passing problems along. - We get it right: Many of our actions cannot be undone and may be examined in court, so accuracy and good records are part of the job, not an extra. - We learn from each other: We work together in our City of London office because the fastest way to learn this work is alongside the people who do it. - We move with our clients: Seizures, court orders and deadlines do not follow office hours. We plan for that and support each other when it happens. - We keep confidences: Our clients trust us with sensitive information, and discretion is part of how we earn that trust. This way of working is demanding and it will not suit everyone. If it suits you, you will do work that few people get to do, and see its results. Join our mission Most criminal proceeds are never recovered. The United Nations Office on Drugs and Crime estimated that less than 1% of laundered criminal proceeds were seized worldwide. In the European Union, Europol found that only 2.2% of criminal proceeds were seized or frozen, and 1.1% finally confiscated. Those figures predate the widespread use of digital assets, which have made the problem harder. Effective recovery disrupts criminal networks, deters crime and returns value to victims and the public. Asset Reality was built by asset recovery practitioners to change those numbers. If you want your work to make more of that recovery happen, we would like to hear from you, even if you do not meet every requirement. Asset Reality does not accept unsolicited applications from recruitment agencies. Privacy Notice Asset Reality will process the personal information you provide as part of your application, including your CV, contact details, employment history, qualifications, and recruitment-related communications, for the purposes of assessing your suitability for employment, managing the recruitment process, and meeting legal obligations. We retain recruitment records for up to 12 months following completion of the recruitment process unless a different retention period is required by law. By submitting an application, you acknowledge that you have read and understood our Candidate Privacy Notice.