IT Manager - Workspace Security and Compliance

About the role

The IT Manager – Workspace Security and Compliance leads the team responsible for protecting the digital workplace. The role owns Microsoft Intune, Microsoft Defender, Zscaler, Microsoft Purview, endpoint patching, security posture, compliance reporting, incident escalation and vendor management, ensuring that endpoints and Microsoft 365 services remain secure and auditable.

Key responsibilities

• Define the operating model, roadmap, standards, priorities and performance objectives for workspace security.
• Manage Microsoft Intune enrollment, compliance policies, application protection, encryption and device control across all supported platforms.
• Oversee Microsoft Defender for Endpoint onboarding, EDR, antivirus, attack‑surface reduction, web protection, vulnerability management and automated remediation.
• Govern Microsoft Defender XDR, Defender for Office 365 and Defender for Cloud Apps, handling phishing, malware, Safe Links, Safe Attachments and impersonation threats.
• Implement and administer Zscaler ZIA, ZPA and Client Connector, including secure web access, SSL inspection and cloud‑application controls.
• Lead Microsoft Purview Information Protection and DLP configuration, labeling, encryption and incident handling across endpoints, Exchange, SharePoint, OneDrive and Teams.
• Maintain patching processes for operating systems and approved third‑party applications, track Secure Score, compliance drift and remediation SLAs.
• Build automated dashboards for compliance, vulnerability, incident and security‑posture reporting.

Required profile

• Proven experience leading security or workspace‑protection teams.
• Strong understanding of cybersecurity, privacy, audit and regulatory requirements.
• Ability to translate business and compliance needs into technical controls, baselines and improvement plans.
• Excellent communication and stakeholder‑management skills.

Required skills

• Microsoft Intune
• Microsoft Defender for Endpoint
• Microsoft Defender XDR (Defender for Office 365, Defender for Cloud Apps)
• Zscaler (ZIA, ZPA, Client Connector)
• Microsoft Purview Information Protection & DLP
• Endpoint patching and vulnerability management
• Security posture monitoring (Secure Score, compliance reporting)