IT Operations & Security Manager

H exists to push the boundaries of superintelligence with agentic AI. By automating complex, multi-step tasks typically performed by humans, AI agents will help unlock full human potential.

H is hiring the world’s best AI talent, seeking those who are dedicated as much to building safely and responsibly as to advancing disruptive agentic capabilities. We promote a mindset of openness, learning, and collaboration, where everyone has something to contribute.

• →

  Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance.

• →

  Ensure secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness. The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation.

• Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP)

• Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications

• Hands-on experience performing user access management, including joiner/mover/leaver workflows

• Experience conducting periodic access reviews and least-privilege audits

• Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential

• Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM

• Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs

• Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar)

• Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership

• Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus

• Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance

• Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding

• Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments)

• Ability to track license utilization and right-size seats to control spend

• Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments

• Maintains an up-to-date vendor inventory and renewal calendar

• Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks

• Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus

• Experience with Linear for IT ticketing and intake workflows

• Familiarity with Vanta for continuous compliance monitoring and evidence automation

• Prior experience at a startup or fast-growing company where IT scope spans helpdesk, security, and compliance

• Strong documentation habits — runbooks, SOPs, and onboarding guides

• Ability to translate technical controls into clear language for non-technical stakeholders

• Comfort owning end-to-end projects with minimal oversight

• Paris

• This role is hybrid, and you are expected to be in the office 3 days a week on average.