Information Technology Security Manager

About the role

The Information Technology Security Manager will lead the design, implementation and ongoing management of endpoint security across a diverse device landscape. This role ensures that security controls align with Microsoft best practices, CIS benchmarks and organisational standards while supporting a seamless user experience.

Key responsibilities

• Design, implement and maintain Microsoft Intune security configurations for Windows, macOS, iOS and Android devices, including compliance policies, configuration profiles, security baselines and app protection policies.
• Administer Intune as the primary endpoint management platform, drive adoption of cloud‑native device management, and support co‑management with SCCM/MECM.
• Manage SCCM/MECM environments for patch deployment, software distribution, endpoint configuration and compliance reporting.
• Develop and enforce BYOD security frameworks, configure MAM policies, conditional access and corporate application controls.
• Configure and optimise Microsoft Defender for Endpoint, including EDR, antivirus, attack surface reduction, threat and vulnerability management, and automated investigation and remediation.
• Implement endpoint hardening standards such as BitLocker, Windows security baselines, firewall and device control policies, and monitor against CIS benchmarks.
• Monitor device health, compliance status and security posture, investigate non‑compliant devices and support vulnerability management initiatives.
• Provide technical support during security incidents, perform device isolation, forensic collection and malware remediation.

Required profile

• Proven experience in managing Microsoft Intune and SCCM/MECM environments.
• Strong background in endpoint security, BYOD governance and Microsoft Defender for Endpoint.
• Ability to design and maintain security policies, compliance frameworks and hardening standards.
• Experience collaborating with EUC, infrastructure and service desk teams to resolve security issues.

Required skills

• Microsoft Intune
• SCCM / MECM
• Microsoft Defender for Endpoint (EDR, ASR, Threat & Vulnerability Management)
• App Protection Policies (MAM)
• Conditional Access
• BitLocker
• Windows Security Baselines
• CIS Benchmarks
• Endpoint Detection and Response
• Automated Investigation and Remediation