IT Security Specialist

About this role

Axios, a media company, is hiring an IT Security Specialist to protect its systems, devices, identities, applications, and workflows. The role focuses on embedding security into technology decisions from evaluation to implementation and ongoing improvement. You will own key security areas such as endpoint security, identity and access management, Google Workspace, SaaS security, monitoring, security awareness, and AI security. The position emphasises understanding how browsers and SaaS layers create security risk and using logs to support incident response. It includes protecting high‑risk users like journalists and executives and driving security awareness programs across the organisation.

What you would do

• Own security for Axios’ Mac fleet, including Jamf, compliance, monitoring, alert investigation, malware response, and device remediation.
• Own Okta-based identity and access management, including adaptive MFA, authentication, SSO, application assignments, access scopes, and joiner/mover/leaver processes.
• Partner with People, Legal and Infrastructure to improve provisioning, offboarding, access removal, archival, legal holds, and lifecycle automation.
• Establish and maintain security configurations and risk controls for core services and SaaS applications, including authentication, access, collaboration, email security, data protection, alerting, activity monitoring, vendor and procurement reviews, security questionnaires, evidence gathering, and recommended safeguards.
• Treat the browser and SaaS layer as critical security boundaries, evaluating how users access data and applications and where browser-based workflows create risk.
• Use logs and activity monitoring across endpoints, browsers, identity systems, Google Workspace, and SaaS applications to investigate suspicious activity and support incident response.
• Assess systems, tools, permissions, and workflows for security, operational fit, and long-term supportability.
• Help protect high-risk users, including journalists and executives, through appropriate privacy, account-security, and personal-data protections.
• Own security awareness programs, including human risk, phishing simulations, reporting workflows, completion tracking, and targeted training for higher-risk users.
• Design and deliver customised training for different parts of the company, including the newsroom, journalists, business teams, and technical teams, based on their workflows and threat models.

What they are asking for

• Has substantial experience in IT security, endpoint security, identity and access management, systems administration, or a related field.
• Has hands-on experience with macOS, Jamf or comparable endpoint platforms, CrowdStrike Falcon, Okta or a similar identity provider, and Google Workspace security.
• Understands modern security boundaries across browsers, SaaS applications, identity providers, endpoints, APIs, data flows, and AI-enabled systems.
• Has experience with security logging, monitoring, incident investigation, vendor assessments, and SaaS risk management.
• Has operated or improved security awareness, phishing, or role-specific training programs.
• Can evaluate risk in the context of real-world workflows, users, business requirements, and operational constraints.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.