IT Operations & Security Manager

About H: H exists to push the boundaries of superintelligence with agentic AI. By automating complex, multi-step tasks typically performed by humans, AI agents will help unlock full human potential. H is hiring the world’s best AI talent, seeking those who are dedicated as much to building safely and responsibly as to advancing disruptive agentic capabilities. We promote a mindset of openness, learning, and collaboration, where everyone has something to contribute. Our role: Key Responsibilities: Manage the company’s internal IT operations, including identity and access management, Google Workspace administration, SaaS tools, endpoint management, and AWS access governance. Ensure secure user lifecycle processes, access reviews, device compliance, and support SOC 2 audit readiness. The role also includes managing SaaS vendors, renewals, license usage, and improving IT processes through documentation and automation. Requirements Identity & Access Management Proven experience administering Google Workspace at scale (user lifecycle, groups, organizational units, security settings, DLP) Strong understanding of SCIM provisioning and SSO/SAML integrations across SaaS applications Hands-on experience performing user access management, including joiner/mover/leaver workflows Experience conducting periodic access reviews and least-privilege audits Cloud & Infrastructure Access Experience managing AWS access (IAM users, roles, groups, policies, SSO via IAM Identity Center) — infrastructure management not required, but comfort navigating the console and understanding permission boundaries is essential Device & Endpoint Management Experience with Apple device management via Iru (formerly Kandji) or a comparable MDM Working knowledge of Apple Business Manager (ABM), including DEP enrollment, VPP, and Managed Apple IDs Familiarity with managing Google Meet hardware / conference room devices (Logitech, Poly, or similar) Compliance & Security Practical experience supporting SOC 2 (Type I or II) audits, including evidence collection and control ownership Familiarity with additional frameworks (ISO 27001, HIPAA, or similar) is a plus Understanding of common IT controls: access reviews, change management, MFA enforcement, endpoint compliance Vendor Management Experience owning the SaaS vendor lifecycle: intake, security review, procurement, renewal, and offboarding Proven track record negotiating contracts and renewals (pricing, terms, true-ups, multi-year commitments) Ability to track license utilization and right-size seats to control spend Comfort partnering with Legal, Finance, and Security on MSAs, DPAs, and vendor risk assessments Maintains an up-to-date vendor inventory and renewal calendar Automation & Scripting Comfortable with at least one scripting language (Python, Bash, or PowerShell) to automate provisioning, reporting, and routine IT tasks Experience integrating systems via APIs or no-code/low-code tools (Okta Workflows, Tines, Zapier) is a plus Nice to Have Experience with Linear for IT ticketing and intake workflows Familiarity with Vanta for continuous compliance monitoring and evidence automation Prior experience at a startup or fast-growing company where IT scope spans helpdesk, security, and compliance Soft Skills Strong documentation habits — runbooks, SOPs, and onboarding guides Ability to translate technical controls into clear language for non-technical stakeholders Comfort owning end-to-end projects with minimal oversight Location: Paris This role is hybrid, and you are expected to be in the office 3 days a week on average. What We Offer: Join the exciting journey of shaping the future of AI, and be part of the early days of one of the hottest AI startups. Collaborate with a fun, dynamic, and multicultural team, working alongside world-class AI talent in a highly collaborative environment. Enjoy a competitive salary. Unlock opportunities for professional growth, continuous learning, and career development. If you want to change the status quo in AI, join us.