IT Operations Specialist
2Coders Studio
/job-details/11574
About the role
2Coders Studio is looking for an
**IT Operations & ISO 27001 Specialist**
to keep our internal technology secure, reliable, and well organised, supporting colleagues across Gran Canaria, Tenerife, and Skopje.
This is a hands-on role combining
**day-to-day IT administration with practical experience of ISO 27001 processes**
. You will manage devices, accounts, corporate tools, and office connectivity while keeping security controls, documentation, and audit evidence current.
You will work closely with management, our information security management system (ISMS) owner, development teams, administration, and external security consultants and auditors. You will own technical operations and contribute to the ISMS, with management retaining responsibility for governance, policy approval, and risk acceptance.
**DevOps experience is a bonus, not a requirement.**
Strong IT operations and ISO 27001 experience are the priorities for this hire.
What you will do IT operationd and employee support
- Administer our Mac fleet using Jamf Pro: enrolment, configuration profiles, application deployment, updates, FileVault encryption, and device compliance.
- Manage the complete device lifecycle, from purchasing coordination and inventory to employee assignment, return, secure wiping, and retirement.
- Administer Google Workspace and corporate SaaS accounts, including onboarding, role changes, offboarding, MFA, least-privilege access, and periodic access reviews.
- Support employees with devices, applications, accounts, and connectivity; prioritise requests by impact and document recurring solutions.
- Maintain office networks, Wi-Fi, guest access, firewalls, VPN, and network documentation.
- Keep asset, service, access, supplier, and licence inventories accurate; coordinate renewals, provider support, and opportunities to reduce unnecessary costs.
ISO 27001 processes and operational security
- Maintain technical security controls and check that everyday operations follow approved policies and procedures consistently across offices.
- Collect and organise audit evidence, linking controls to dated records of access reviews, device compliance, endpoint protection, patching, backups, and other operational checks.
- Support internal and external audits by preparing evidence, demonstrating controls, and following up on findings.
- Contribute to technical risk assessments and risk treatment plans; track assigned corrective actions through root-cause analysis, remediation, and verification of effectiveness.
- Maintain clear procedures for access management, onboarding and offboarding, device handling, patching, changes, incidents, and recovery.
- Administer Sophos EDR, review protection coverage and alerts, investigate suspicious activity, and coordinate incident containment, escalation, and follow-up.
- Coordinate vulnerability remediation, credential security, and repository access controls with the relevant technical owners.
Service reliability and continuity
- Maintain visibility of critical services, their owners, dependencies, access, and security configurations; coordinate infrastructure changes with development teams and providers.
- Monitor service health, security events, and backup results, and follow up on failures.
- Maintain backup and recovery procedures, carry out restoration tests, and record results.
- Support business continuity exercises and keep recovery documentation usable and current.
- Report operational risks, control gaps, and improvement priorities to management.
What we are looking for
- **Proven hands-on IT administration experience**
, with enough autonomy to own daily operations, troubleshoot problems, and manage competing priorities.
- **Practical ISO 27001 experience**
supporting an ISMS, audits, evidence collection, risk treatment, and corrective actions. You should be able to explain controls you have operated and audit findings or process improvements you have helped resolve.
- Strong macOS administration skills and experience with device management platforms, ideally Jamf Pro.
- Experience administering Google Workspace or a comparable corporate identity and productivity platform, including account lifecycles, MFA, and access reviews.
- Experience with endpoint protection or EDR, ideally Sophos, plus patch management, encryption, and security incident handling.
- Working knowledge of networking, DNS, Wi-Fi, firewalls, VPN, backups, and restore testing.
- A structured approach to documentation, inventories, change records, and evidence.
- Clear communication with technical and non-technical colleagues, a helpful service attitude, and the judgement to escalate risks and coordinate high-impact changes.
Experience with equivalent tools is welcome, together with the ability to learn our stack. Practical ISO 27001 experience is essential; a formal auditor or implementer certification is a plus rather than a requirement.
Optional skills: DevOps and automation
Any of the following would be useful, but none is required to apply:
- Bash or Python scripting to automate repetitive administrative tasks.
- GitHub Actions or other CI/CD tools for builds, tests, and deployments.
- Linux, Docker, and development, staging, or production environment administration.
- AWS, Azure, Cloudflare, Heroku, or OVH administration.
- Infrastructure as code, secrets management, or deployment automation.
- Wazuh or other centralised security monitoring and log analysis tools.
There is scope to contribute to deployment and infrastructure improvements alongside development teams, with responsibilities agreed according to experience and operational priorities. Applicants with strong IT and ISO 27001 experience are encouraged to apply even if they have no DevOps background.
What success looks like
During your first three months, you will build a clear picture of our environment, prioritise technical risks, and establish a dependable operating routine. Early outcomes include accurate device and access inventories, reliable onboarding and offboarding, documented endpoint compliance, scheduled audit evidence collection, tracked corrective actions, and a successful documented restore test.
**What we offer**
- Competitive Salary
- Full-time, permanent position (40h/ work week)
- Flexible hours/ work from home when needed
- Private medical insurance after prohibition period
- Personal development & career growth plan
- An opportunity to learn and develop – we give every employee a budget per year to grow their skills outside the company
- Gaining experience in a highly specialized, exciting and growing sector
- Company parties and team-building adventures
**About 2Coders**
We build top apps and custom software for our incredible customers worldwide. We specialise in OTT and video experience platforms, one of the fastest growing markets in the world. We believe in fostering a dynamic and supportive working environment, with training and development opportunities, as well as work-life balance and location-related benefits.
2Coders Studio is looking for an
**IT Operations & ISO 27001 Specialist**
to keep our internal technology secure, reliable, and well organised, supporting colleagues across Gran Canaria, Tenerife, and Skopje.
This is a hands-on role combining
**day-to-day IT administration with practical experience of ISO 27001 processes**
. You will manage devices, accounts, corporate tools, and office connectivity while keeping security controls, documentation, and audit evidence current.
You will work closely with management, our information security management system (ISMS) owner, development teams, administration, and external security consultants and auditors. You will own technical operations and contribute to the ISMS, with management retaining responsibility for governance, policy approval, and risk acceptance.
**DevOps experience is a bonus, not a requirement.**
Strong IT operations and ISO 27001 experience are the priorities for this hire.
What you will do IT operationd and employee support
- Administer our Mac fleet using Jamf Pro: enrolment, configuration profiles, application deployment, updates, FileVault encryption, and device compliance.
- Manage the complete device lifecycle, from purchasing coordination and inventory to employee assignment, return, secure wiping, and retirement.
- Administer Google Workspace and corporate SaaS accounts, including onboarding, role changes, offboarding, MFA, least-privilege access, and periodic access reviews.
- Support employees with devices, applications, accounts, and connectivity; prioritise requests by impact and document recurring solutions.
- Maintain office networks, Wi-Fi, guest access, firewalls, VPN, and network documentation.
- Keep asset, service, access, supplier, and licence inventories accurate; coordinate renewals, provider support, and opportunities to reduce unnecessary costs.
ISO 27001 processes and operational security
- Maintain technical security controls and check that everyday operations follow approved policies and procedures consistently across offices.
- Collect and organise audit evidence, linking controls to dated records of access reviews, device compliance, endpoint protection, patching, backups, and other operational checks.
- Support internal and external audits by preparing evidence, demonstrating controls, and following up on findings.
- Contribute to technical risk assessments and risk treatment plans; track assigned corrective actions through root-cause analysis, remediation, and verification of effectiveness.
- Maintain clear procedures for access management, onboarding and offboarding, device handling, patching, changes, incidents, and recovery.
- Administer Sophos EDR, review protection coverage and alerts, investigate suspicious activity, and coordinate incident containment, escalation, and follow-up.
- Coordinate vulnerability remediation, credential security, and repository access controls with the relevant technical owners.
Service reliability and continuity
- Maintain visibility of critical services, their owners, dependencies, access, and security configurations; coordinate infrastructure changes with development teams and providers.
- Monitor service health, security events, and backup results, and follow up on failures.
- Maintain backup and recovery procedures, carry out restoration tests, and record results.
- Support business continuity exercises and keep recovery documentation usable and current.
- Report operational risks, control gaps, and improvement priorities to management.
What we are looking for
- **Proven hands-on IT administration experience**
, with enough autonomy to own daily operations, troubleshoot problems, and manage competing priorities.
- **Practical ISO 27001 experience**
supporting an ISMS, audits, evidence collection, risk treatment, and corrective actions. You should be able to explain controls you have operated and audit findings or process improvements you have helped resolve.
- Strong macOS administration skills and experience with device management platforms, ideally Jamf Pro.
- Experience administering Google Workspace or a comparable corporate identity and productivity platform, including account lifecycles, MFA, and access reviews.
- Experience with endpoint protection or EDR, ideally Sophos, plus patch management, encryption, and security incident handling.
- Working knowledge of networking, DNS, Wi-Fi, firewalls, VPN, backups, and restore testing.
- A structured approach to documentation, inventories, change records, and evidence.
- Clear communication with technical and non-technical colleagues, a helpful service attitude, and the judgement to escalate risks and coordinate high-impact changes.
Experience with equivalent tools is welcome, together with the ability to learn our stack. Practical ISO 27001 experience is essential; a formal auditor or implementer certification is a plus rather than a requirement.
Optional skills: DevOps and automation
Any of the following would be useful, but none is required to apply:
- Bash or Python scripting to automate repetitive administrative tasks.
- GitHub Actions or other CI/CD tools for builds, tests, and deployments.
- Linux, Docker, and development, staging, or production environment administration.
- AWS, Azure, Cloudflare, Heroku, or OVH administration.
- Infrastructure as code, secrets management, or deployment automation.
- Wazuh or other centralised security monitoring and log analysis tools.
There is scope to contribute to deployment and infrastructure improvements alongside development teams, with responsibilities agreed according to experience and operational priorities. Applicants with strong IT and ISO 27001 experience are encouraged to apply even if they have no DevOps background.
What success looks like
During your first three months, you will build a clear picture of our environment, prioritise technical risks, and establish a dependable operating routine. Early outcomes include accurate device and access inventories, reliable onboarding and offboarding, documented endpoint compliance, scheduled audit evidence collection, tracked corrective actions, and a successful documented restore test.
**What we offer**
- Competitive Salary
- Full-time, permanent position (40h/ work week)
- Flexible hours/ work from home when needed
- Private medical insurance after prohibition period
- Personal development & career growth plan
- An opportunity to learn and develop – we give every employee a budget per year to grow their skills outside the company
- Gaining experience in a highly specialized, exciting and growing sector
- Company parties and team-building adventures
**About 2Coders**
We build top apps and custom software for our incredible customers worldwide. We specialise in OTT and video experience platforms, one of the fastest growing markets in the world. We believe in fostering a dynamic and supportive working environment, with training and development opportunities, as well as work-life balance and location-related benefits.
