IT Operations Lead (IT & Compliance)

About HONKJoin the world of HONK, where innovation leads the charge. Our software platform transforms parking operations, making them more efficient, profitable and consumer-friendly. Trusted by 500+ private operators, colleges and universities, municipalities, and real estate owners across North America, HONK serves millions of drivers every year.
The Role We are seeking a detail-oriented and highly trusted IT Operations Lead to become our first dedicated in-house IT hire, reporting directly to our CTO. You will be the end-to-end owner of corporate IT for a 70-person SaaS company, from device provisioning and helpdesk through to the corporate IT controls behind our SOC 2 and PCI DSS compliance programs. These programs are well established — you'll be operating proven frameworks in close partnership with our Infrastructure team, not building them from scratch. This is a hands-on senior individual contributor role with room to grow into a management position as the company scales.
Key Responsibilities

• Drive IT and security initiatives such as lightweight mobile application management, and endpoint baseline enforcement (disk encryption, screen lock, EDR health).
• Administer Google Workspace end to end: org units, groups, security settings, retention, etc.
• Manage the full device lifecycle through Iru endpoint management (formerly Kandji): procurement, enrollment and imaging, OS version enforcement, patching, repairs, refresh cycles, and secure wiping/retirement of returned devices.
• Provision and manage our software tooling: set up, license, and administer the core SaaS stack, handle access requests, and evaluate new tools that keep a growing company secure without slowing it down.
• Own employee onboarding and offboarding: hardware, accounts, and access provisioned by day one and revoked same-day at exit.
• Maintain the IT asset inventory and write the runbooks and documentation you'd want to inherit.
• Automate the repetitive parts of the role — onboarding steps, evidence collection, endpoint compliance reports — using AI tools and scripts, so the IT function scales faster than headcount.
• Run our internal helpdesk end to end: triage, resolve, and document IT issues across the company.
• Own the security awareness program: run phishing simulation campaigns, enroll clickers into training, and track completion.
• Operate and evidence the corporate IT and other controls in our SOC 2 and PCI DSS audits: access reviews, on/offboarding records, endpoint compliance, and training completion.
• Support audit coordination through our compliance platform: field auditor requests and track evidence collection in partnership with our Infrastructure/DevOps team, who own production infrastructure controls.

About You

• 4–7+ years in IT administration/operations, ideally as the sole or senior IT owner at a 50–200 person company.
• High ownership, discretion, and judgment: this role holds privileged access to nearly every system we run, and a background check is required.
• Clear and professional communication skills — you're the approachable face of IT and security best practices across the org.
• Full-lifecycle Google Workspace administration experience, owning everything from organizational unit structure and security policies to account provisioning and audit compliance.
• Hands-on MDM/endpoint management experience in a macOS-first environment (Iru/Kandji, Jamf, or Mosyle), including zero-touch deployment via Apple Business Manager; enough Windows familiarity to support a small number of exceptions.
• EDR deployment and management experience (CrowdStrike preferred).
• Direct experience supporting and implementing audit controls on devices and endpoints; comfort with compliance automation platforms like Vanta, Drata, or Secureframe.
• AI-native approach to automation — you use AI tools to write scripts, build workflows, and eliminate repetitive work rather than doing the same task a third time.
• Meticulous on/offboarding discipline and strong documentation habits.

Bonus Points

• SSO/IdP administration (Okta, Google, JumpCloud).
• PCI DSS exposure.
• Security awareness tooling (KnowBe4 or similar).
• Certifications: Google Workspace Administrator, Jamf, CompTIA Security+ or similar.

Compensation & Benefits

• Hybrid from our mid-town Toronto office 2+ days/week.
• Comprehensive health, dental and vision coverage.

Disclaimer:We are actively hiring for an immediate, open position to join our growing team. As part of our commitment to a fair hiring process, HONK does not use artificial intelligence or automated decision-making tools to screen, assess, or select candidates; every application is reviewed by a real person.