IT Operations and GRC Lead

Nexl is looking for an IT Operations and GRC Lead to own how our systems are run and how our security certifications are kept audit-ready. You will administer Microsoft 365, look after the devices and tools our teams use every day, and lead the governance, risk, and compliance work that shows our controls operate as intended.

Law firms trust Nexl with their relationship data, so well-run IT and sound controls are part of what we deliver to customers. The systems you administer are the same ones our auditors review, which makes IT operations and compliance one connected job here. AI is part of how we work. We expect you to use AI tools by default for ticket triage, documentation, log analysis, and evidence gathering, and to help decide where automation is safe and where human review must stay in place.

Must haves: 3 or more years in IT operations or support, ideally in a cloud-first SaaS or professional-services environment. Hands-on administration of Exchange Online, SharePoint Online, and Microsoft Entra ID. Help desk experience at tier 1 and tier 2, and the patience to teach colleagues. Working knowledge of networking, including IP, DNS, and SMTP.

Experience supporting audits or controls under ISO 27001, SOC 2, or a similar framework. Comfortable using AI tools to speed up documentation, triage, and analysis. High attention to detail, with the discipline to keep evidence clean and current. Explains technical and control topics clearly to non-technical colleagues and auditors.

Comfortable in a scaling environment where problems often arrive without a clear owner. Nice to haves: Experience with Intune or other mobile device management platforms. Familiarity with Microsoft Defender and Microsoft Purview. PowerShell scripting for automation and reporting. A relevant certification, such as Microsoft 365 Administrator Expert or ISO 27001 Lead Implementer.

Experience in LegalTech or other professional-services software environments. Microsoft 365 and collaboration: Tenant administration: Run Exchange Online, SharePoint Online, Teams, OneDrive, and Microsoft Entra ID, keeping them secure, available, and correctly licensed. Sites and permissions: Maintain SharePoint sites, libraries, workflows, and permissions, and manage site growth and storage quotas.

Mail and connectivity: Troubleshoot Exchange, mobility, and connectivity issues, including those raised by monitoring alerts. Usage and audit reporting: Review audit logs, storage, and usage reports to catch problems early and plan capacity. End-user and endpoint support: Tier 1 and tier 2 support: Resolve hardware, software, operating system, network, and storage issues, and keep clear ticket records.

Joiners, movers, and leavers: Set up and retire accounts, devices, and access so every new starter is productive on day one. Device management: Manage laptops and mobile devices through Intune, including patching and firmware and BIOS updates. Training: Show colleagues how to get the most from Microsoft 365 and collaboration tools such as Teams, OneDrive, OneNote, and Outlook.

Security, governance, and compliance: Access reviews: Run quarterly reviews and document that access to data, systems, and facilities is appropriate and limited to authorised people. Audit evidence: Collect and maintain evidence for our ISO 27001 and SOC 2 programs, and work alongside external auditors during reviews.

Policies and risk: Keep security policies current, maintain the risk register, and report risk status to leadership. Customer assurance: Help answer customer security questionnaires and due diligence requests. Process improvement: Spot manual IT and compliance tasks worth automating and put the fix in place. Hybrid working.

You'll be in our Sydney hub 1-2 days a week for collaboration. Work from anywhere. Spend up to four weeks a year working remotely from a location of your choice. Purposeful connection. A jam-packed social scene with weekly catered lunch, quarterly socials, team off-sites, and events throughout the year to bring everyone together.

Birthday leave. Take a paid "Nexl Day" during the week of your birthday. High growth. A scaling environment with autonomy, ownership, and visible impact. ESOP. Employee stock options so you share in the upside. Parental leave. Paid leave to support you and your family as it grows. Transparent by default. Fortnightly all-hands with strategy, metrics, wins, and learnings.

Tools & tech. Modern, AI-first ways of working to help you move faster and smarter, plus a work laptop.