IT Operations & Cybersecurity Specialist

IT Operations & Cybersecurity Specialist Location: Poland (Remote/Home-based by default; shared office space in Gdańsk available) Employment Type: Full-time (Individual Contributor) Travel: Occasional, estimated less than 15% (e.g., for audits, leadership alignment) Language: English Overall Responsibility The IT Operations & Cybersecurity Specialist keeps ScanReach’s IT infrastructure secure, reliable, and well governed — and acts as the link between what happens in the field and what the technical team prioritizes. You will own day-to-day IT operations and the reporting that connects Customer Success to DevOps, with real scope to grow into cybersecurity/ISO 27001 project leadership and applied AI as you develop in the role. The role combines: IT Operations & Service Visibility: Infrastructure oversight, Azure administration, and ownership of the service ticket metrics, SLA reporting, and in-field uptime data that connect Customer Success with the technical/DevOps team. This is core to the role from day one. Cybersecurity & ISO 27001 (Growth Track): A defined project you can make your own: leading ScanReach toward ISO 27001 certification, then maintaining compliance on an ongoing basis. Applied AI (Growth Track): Championing AI-assisted workflows in IT operations and helping other teams across ScanReach adopt AI tooling in their own work. This is an individual-contributor role with genuine ownership and room to grow — ideal for someone who wants to build something, not just maintain it. Key Accountabilities IT Operations & Service Visibility (Core) System Monitoring & Incident Management: Ensure consistent monitoring of internal and field-deployed systems, with timely incident detection, triage, and resolution to maintain operational stability. IT Infrastructure Management: Oversee internal systems, Azure cloud services, and IT/IoT equipment deployed on customer vessels, ensuring reliable, secure, and cost-efficient performance. Cloud Administration: Configure, monitor, and optimize Azure infrastructure for performance and cost-efficiency, including automation where it reduces manual overhead. Senior Support & Escalation: Provide expert-level support for core platforms (Azure, Office 365, Atlassian Confluence, Salesforce) and act as a senior escalation point, working alongside the existing support tiers. User Lifecycle & Provisioning: Manage onboarding/offboarding, access control, and provisioning of equipment shipments to customers and field teams. Disaster Recovery & Business Continuity: Develop, maintain, and test DR/BC plans for internal and customer-facing IT infrastructure, ensuring rapid restoration capability. Service Ticket & Uptime Metrics: Own the reporting and analysis layer across the service ticket lifecycle — SLA adherence, breach trends, recurring issues — and in-field uptime, turning them into recurring, leadership-visible KPIs. Customer Success ↔ DevOps Bridge: Act as the structured link between Customer Success and the technical/DevOps team, translating field and customer signals into actionable technical priorities and reporting resolution status back to the customer-facing organization. Cybersecurity & ISO 27001 (Growth Track) A defined project you can make your own: gap assessment, build-out, certification, then lighter steady-state maintenance. Prior ISO 27001 experience is a strong plus, not a requirement. ISO 27001 Project: Lead ScanReach’s path toward ISO 27001 certification — gap assessment, control implementation, documentation, and audit — then maintain compliance at a lighter ongoing cadence. Risk & Security Basics: Build and maintain a cybersecurity risk register; help coordinate vulnerability assessments and track remediation. Security Awareness: Own the company-wide security awareness program (training completion, phishing simulation, policy acknowledgement) and report completion status to leadership. Applied AI (Growth Track) Open to anyone with curiosity and initiative — prior AI project experience is a plus but not a prerequisite. AI in IT Operations: Explore and apply AI-assisted approaches to monitoring, ticket triage, documentation, and automation. Cross-Company AI Adoption: Act as a go-to person for colleagues curious about applying AI tools in their own work; share practical examples and lessons learned. Responsible Use: Help shape simple, sensible guardrails for AI tool use as adoption grows, particularly where it touches security or customer data. Responsibility & Impact Your performance is measured on the reliability of core IT operations and the visibility of service/uptime metrics from day one, with growing weight on cybersecurity progress and AI adoption as you grow into those tracks. Responsible for the stability, security, and availability of ScanReach’s internal and customer-facing IT estate. Accountable for service ticket SLA reporting and in-field uptime visibility, and for keeping Customer Success and DevOps aligned on priorities. Accountable for progress against ISO 27001 milestones once the project track is underway. Expected to identify and remove bottlenecks between field/customer-facing teams and the technical organization. Encouraged to bring AI-assisted approaches into IT operations and to share these with other teams. Carries out any other reasonable management request. Scope for Impact / Authority Authorized to enforce security policy and access control decisions across IT systems. Authorized to escalate activity that introduces material security or compliance risk, pending management review. Right to propose and adjust service ticket SLAs and escalation paths in agreement with Customer Success and DevOps. Build and maintain the cross-functional relationships needed to meet company security, quality, and uptime goals. Drive continuous improvement of IT operations and, as you grow into the role, of security and AI adoption practices. Key Relationships & Resources Internal Relationships DevOps / Technical Team Customer Success Sales Management / CTBDO / CEO External Relationships IT and cloud vendors (e.g., Microsoft Azure) Cybersecurity/ISO 27001 auditors, once the certification project is underway Resources No direct reports IT budget (delegated authority) Technical / Job-Specific Skills and Qualifications Required IT Infrastructure Fundamentals: Solid working knowledge of IT infrastructure (Azure, internal systems, system monitoring). Operating Systems: Proficiency in Windows and Linux administration. Networking: Understanding of DNS, DHCP, VLANs, VPNs, and firewalls. Cloud Computing: Experience with Azure or a comparable cloud platform. Service Reporting: Comfortable working with ticketing systems and building clear SLA/uptime reporting that non-technical stakeholders can act on. Security Fundamentals: General awareness of IT security best practices and willingness to grow this into deeper ISO 27001 / risk-management capability. Communication: Able to explain technical topics clearly to non-technical stakeholders and bridge between customer-facing and technical teams. Growth Mindset: Genuine curiosity about cybersecurity/compliance and/or applied AI — this matters as much as existing depth in either. Preferred (Nice to Have, Not Required) Exposure to ISO 27001, ISMS, or other compliance frameworks. Hands-on experience with AI-assisted tools in an IT, development, or operations context. Familiarity with ITIL/ITSM principles. Scripting/automation experience (Python, Bash, or similar). Maritime, IoT, or other OT-adjacent industry experience. Soft Skills Problem-solving: Analyzes issues methodically and drives them to resolution. Ownership: Comfortable taking accountability and growing a function over time. Curiosity: Motivated to learn new tools, frameworks, and ways of working. Communication: Clear written and verbal skills across technical and non-technical audiences. Adaptability: Comfortable with a role that will evolve as the person grows into it. Experience 2+ years in an IT operations, infrastructure, or support role. No prior ISO 27001 or AI-project experience required — enthusiasm and aptitude matter more than a finished CV. Leadership Characteristics Display the ScanReach behaviours at the level appropriate to this role: Values (Brave-Honest-Caring) Performance Customer Intimacy Technical Expertise Continuous Improvement