Operations Manager, IT & Security

Joko is an AI shopping app and tech company (certified B Corp) with over 120 talents across Paris, Barcelona and New York. The Business Operations team handles internal innovation and strategic challenges. This role owns security and IT foundations across the company, sitting at the intersection of IT Ops and security. The role includes building an identity provider, device management, endpoint security and the internal IT foundation as the company scales, and is cross-functional, touching every employee.

Responsibilities

Set up an Identity Provider (company-wide SSO, plus SCIM) and own the password manager while ensuring MFA is activated wherever possible; Build integrations and automations so access is granted and removed automatically (zero-touch access); Deploy an MDM solution for centralised device management; Review the company tooling catalogue, ensure minimum access for everyone and keep security audits up to date; Drive security best practices for the working environment, including endpoint hardening, access management, training and phishing simulations; Be the owner of the security of employees' working environment; Run security audits on new tools, including AI tools, before rollout; Define, maintain and promote the AI security policy; Manage access across the stack (Google Workspace, Slack, Notion, Keeper, AI tools, business SaaS), including onboarding, offboarding and external users; Monitor, triage and handle security alerts and incidents, acting as first responder; Build and maintain incident response playbooks and run post-incident reviews; Manage device onboarding and offboarding with the people team; Provide first-line technical support to employees on tools

Requirements

Builder mindset: automates processes and prefers building tools or workflows over repeating manual tasks; Solid IT fundamentals (identities, device management, endpoint security, enterprise SaaS tooling); ~4-7 years of experience in IT Ops, security or systems administration; Strong cross-functional communication, able to translate security stakes into plain language; Rigor, autonomy, and a taste for building clear, durable processes; Open and eager to learn emerging topics, notably AI agents and their security

Nice to have

Experience with an enterprise EDR / anti-malware; Awareness of security frameworks (SOC 2, ISO 27001); Hands-on experience deploying an IdP (Okta, Google Workspace, Entra ID) and/or an MDM (Jamf, Kandji, Intune)

Benefits

Top-market compensation; Equity for everyone; Half-day each week dedicated to learning AI; Yearly offsite and budget for team-building events and monthly in-person gatherings; Contribution to ClassPass subscription; 8-week leave paid 100% for the second parent; Flexible remote work, with office or home choice for Paris-based employees; Coworking space and coworking budget for employees living elsewhere; Work from most countries for up to 3 months per year