IT Infrastructure and Security Lead

Application Deadline: 9 November 2026

Department: Operations

Employment Type: Permanent - Full Time

Location: London, UK

Reporting To: James Theedom - Head of Finance and Compliance

Compensation: £54,822.63 / year

Description

Key Responsibilities

• Lead, support and develop the IT and Facilities function, including line managing the IT & Facilities Officer (objective setting, development and performance management)
• Develop and implement infrastructure and security strategies and a technology roadmap aligned with organisational goals, ensuring technology platforms are efficient and capable of supporting future growth and innovation
• Own the IT budget and capital planning
• Provide expert advice on emerging technologies, including AI, and security threats to inform strategic planning relating to digital investment and risk mitigation

• Own the organisation’s technical information security strategy, working with the Legal & Compliance team on the wider information governance framework
• Lead Cyber Essentials and Cyber Essentials Plus certification and annual renewal
• Own the technical implementation and controls that support GDPR and information security requirements and lead the technical response to data breaches. Ownership of the wider GDPR/data protection compliance framework, DPIAs, retention policies and regulatory compliance sits with the Legal & Compliance team; this role provides technical input
• Lead cyber security risk assessments and vulnerability management, and maintain an information security risk register
• Lead incident response for security incidents and major IT outages
• Liaise with senior leadership, Trustees, and external auditors on information security and IT risk, including reporting to the Finance, Audit, Risk and Compliance Committee as required
• Liaise with the Department for Education and other external stakeholders as required to support technology assurance processes, provide evidence of compliance and respond to IT, cyber security and infrastructure-related contractual requirements
• Maintain awareness of industry-standard information security controls and apply them across the organisation’s systems

• Oversee the design, operation, maintenance and optimisation of networks, storage, and cloud platforms and related services, ensuring these are resilient and efficient
• Own network architecture and the infrastructure roadmap
• Own IT disaster recovery and technology continuity arrangements, and work with organisational leads and system owners to support wider business continuity planning and testing
• Own the architecture, governance and senior administration of Microsoft 365/E5, Microsoft Entra ID (formerly Azure AD) and SharePoint; recommend and lead major system changes and migrations as required
• Own the device management strategy
• Lead data migration and system upgrade projects
• Ensure technology infrastructure remains scalable and capable of supporting organisational growth and future programme expansion

• Jointly own the organisation’s AI strategy with the Culture and Operations Director, shaping its direction so it supports organisational priorities and meets information security, data protection and ethical requirements
• Lead the rollout of the AI strategy, including the selection and secure deployment of AI tools, AI governance and acceptable use guidance, risk assessment, and supporting staff to adopt AI effectively

• Own supplier strategy and lead contract negotiations (ISPs, MSPs, software suppliers, outsourced IT helpdesk)
• Monitor IT spend and software licensing costs against budget, and make best use of sector discount schemes (e.g. Microsoft/Google nonprofit licensing)
• Hold the outsourced helpdesk provider to SLA and escalation performance, and establish and monitor service standards for internal support
• Oversee incident, request, problem and escalation processes
• Monitor service performance, experience and recurring support issues
• Ensure clear ownership and escalation arrangements across internal staff and outsourced providers
• Use service data and user feedback to drive continuous improvement

• Establish, maintain and continuously improve IT governance frameworks, including policies, processes, standards and controls that support secure and effective service delivery
• Report on IT performance and service delivery to senior leadership and relevant committees as required
• Develop and maintain IT and information security policies (acceptable use, BYOD, password policy)
• Ensure IT systems meet relevant statutory and regulatory requirements, working with the Legal & Compliance team on data handling
• In conjunction with the Legal & Compliance team, manage IT and security audits, ensuring findings are addressed and risks mitigated, and that IT systems support compliance with data protection legislation and cyber security expectations

• Oversee the facilities function, delivered day to day by the IT & Facilities Officer, covering premises and building maintenance, landlord, managing agent and licensee relationships, contractors, utilities and office operations, to provide a safe, secure and cost-effective working environment
• Ensure compliance with health and safety, fire safety, building security and statutory property obligations (including risk and DSE assessments, statutory checks and certificates, insurance, and lease/licence obligations), and oversee premises-related business continuity arrangements

Skills, Knowledge and Expertise

• Experience in a senior IT leadership role covering infrastructure and security
• Strong knowledge of cyber security frameworks and best practice (e.g. Cyber Essentials, ISO 27001)
• Proven hands-on experience of managing cloud and hybrid environments (e.g. Microsoft 365/Entra ID)
• Experience of aligning IT infrastructure and security initiatives with organisational objectives
• Experience of managing budgets, suppliers and contract negotiations
• Understanding of AI tools and the governance, security and data protection considerations in deploying them
• Experience of, or willingness to take on, oversight of facilities and health and safety compliance
• Info Security qualifications from either IASME or ISC2

•  Strong stakeholder engagement skills, and the ability to translate complex technical concepts into clear business language for senior leaders and Trustees
• An analytical approach to solving complex technical and security challenges
• Proven ability to line manage and develop staff and manage outsourced IT providers

Benefits

• Flexible working hours
• Competitive pension employer contribution
• 25 days annual leave + bank holidays + office closes from 25 Dec to 1 Jan
• Buy up to five days annual leave a year
• Interest free loan for season ticket
• Personal coaching and mentoring
• Cycle loan scheme
• Deposit loan scheme
• Volunteering days
• Employee assistance programme
• Life Assurance Scheme (x3 salary)