Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain.
Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS.
We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission.
Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.
Risk Ledger sells trust. Our product tells customers whether their suppliers are secure, so our own security posture is part of what we sell. We’re ISO 27001 certified, SOC 2 compliant and working towards ISO 42001, and the way we run IT is evidence in those audits.
As our Senior IT Engineer, you’ll be the single owner of IT: our people, devices and SaaS estate. You’ll work directly with the Director of Information Security & IT Operations, alongside our Senior SecOps Engineer, supporting every team across our UK and US offices. The team is growing from 3 to 5-6 people over the next 12 months, so you’ll help shape how IT and security work together as we scale.
This is an engineering role, not a help desk role. You’ll still run support well, but your impact will come from building the platform: identity, device management, automation and safe AI enablement.
Own identity, access and SaaS administration
- Administer our cloud identity provider and productivity suite, including users, groups, app access, third-party app controls and mail routing.
- Implement and maintain SSO and automated user provisioning (SCIM) across our SaaS estate, and help us move to a dedicated identity platform.
- Administer our core business tools, from collaboration and documentation to ticketing, password management and AI tools, keeping access least-privilege and role-based.
- Run access changes and privileged-account requests, and support the quarterly access reviews our policies require.
Engineer endpoint and device management
- Own our MDM platform for a macOS fleet: zero-touch enrolment, configuration profiles, patching, compliance, self-service, and remote lock and wipe.
- Build and enforce endpoint controls, including controls on local AI tooling, browser and extension policy, and just-in-time admin elevation.
- Manage enrolment of personal devices that access company data.
- Prepare for and support the rollout of endpoint detection and response (EDR) with Security Operations.
Run joiners, movers and leavers end to end
- Own the process from HR trigger to day one and final day, covering hardware, accounts, access changes and offboarding, with no gaps between HR and IT.
- Automate wherever you can, and track time-to-onboard and time-to-offboard against an agreed SLA.
- Support colleagues in the UK and US, including those employed through third-party arrangements.
Operate IT as a service
- Own the IT support queue and channels: triage, resolve, and set clear expectations on response times.
- Maintain self-help guides and runbooks so common requests become self-service.
- Look after hardware, AV, meeting rooms and office technology, including office moves.
- Spot recurring issues and fix the cause, not the ticket.
Be a security-minded partner to the Director of Information Security
- Be the Director’s hands-on IT counterpart, implementing security controls, policies and improvements across our IT estate and keeping them running.
- Bring a security lens to every IT decision, flagging risks early and proposing secure alternatives rather than workarounds.
- Configure and tune browser and SaaS security tooling, and act on its alerts, such as leaked credentials and unsanctioned apps.
- Run first-line triage on reported phishing and IT-side incident response, including preserving evidence from devices.
- Review new tools, integrations and browser extensions against our supplier and AI governance processes before they’re allowed.
- Own the IT asset register and keep IT and device controls passing in our compliance platform, with evidence ready for SOC 2, ISO 27001 and Cyber Essentials Plus audits.
- Support security projects, policy updates, audits and reporting.
Automate, enable AI and scale
- Make automation the default. Script, integrate and orchestrate repetitive IT and admin work using scripting, APIs, workflow tools and AI agents, and document what you build.
- Build AI-assisted IT operations, such as agents that triage requests, answer common questions from our runbooks, or check tool requests against our approval criteria.
- Roll out, configure and administer approved AI tools, connectors and integrations so every team can use them productively and safely.
- Put practical guardrails in place in line with our AI policies, covering access scopes, data boundaries, connector and MCP controls, and visibility of what’s in use.
- Help colleagues adopt AI well through guides, office hours and quick wins, and feed what you learn into our AI governance.
- Evaluate and introduce IT and AI tooling with clear cost and risk trade-offs, help shape the IT roadmap with the Director, and mentor any future IT Ops Engineer.
