Operations Manager, IT & Security

(Some of the benefits listed below are available to full-time positions only)

At Joko, we believe that flexibility and trust are essential. Our work environment reflects this through:

• Flexible remote : If you live in Paris, you can choose to work from our office or from home with no constraints. If you live elsewhere, we can provide access to a coworking space and a coworking budget.

• Work from anywhere : Want to spend a month in Italy while working? You can work from most countries in the world for up to 3 months per year.

On top of that, we offer plenty of perks:

• 💸 Top-market compensation

• 📈 Equity for everyone with the chance to own a piece of what you build

• 🤖 Half-day each week dedicated to leveling up with AI by exploring new tools, iterating hard, and sharpening your skills

• 🌴 Yearly offsite in amazing locations and budget for team-building events & monthly in-person gatherings

• 💪 Contribution to your ClassPass subscription

• 🍼 8-week leave paid 100% for the second parent

• ...and much more, check the full list here!

At Joko, our mission is to we help consumers save time and money when shopping online or in-store.

Founded in Paris, Joko is a tech company and certified B Corp with over 120 talents across Paris, Barcelona, and New York (and beyond). More than 7 million users already save money every day at 10,000+ merchants with Joko.

From cashback and automatic coupons to price alerts, we've kept expanding our products to make shopping smarter. Today, Joko is an AI shopping app: with Juno, our shopping assistant, users can find the right product at the best price in only a few seconds, with recommendations that get sharper the more they use it.

Having reached profitability in our core market, we're now scaling globally, with a strong focus on the US.

It's still day 1, come build the future of shopping with us!

Security is Joko's number one priority, and you will own it where it touches every employee: from every laptop to every identity and tool. You turn the initiatives already underway into a secure-by-design, automated foundation, so a fast-growing, AI-driven company can move fast, safely.

Joko is the AI shopping app that helps millions of people save time and money: 7 million users, 10,000 merchants and a team of ~120 people from 18 nationalities, heading to 200+ by the end of 2027. Enterprise-grade security (SSO, MFA, audits) is one of our six company-wide priorities for 2026, and our internal IT foundation needs to scale with us: identity management, device management, business tooling, and endpoint security. This is a rare chance to own that foundation at a pivotal moment, with a blank canvas to build on and a company-wide priority behind you. This role sits at the intersection of IT Ops and security - a cross-functional role that touches everyone in the company.

• Build, don't just maintain: you choose, deploy and shape the IdP, MDM and EDR stack from day one.

• Real ownership and visibility: your work is felt by every employee, every day, and directly supports one of the company's top priorities.

• A pioneering topic: help define how we safely adopt AI agents and AI-powered workflows, in a company where everyone uses AI daily.

• A company on the rise: 7M users, 10k merchants, and a team growing from ~120 to 200+ - with a strong international, partly remote culture.

1. IT foundation & identities

• Set up an Identity Provider (company-wide SSO, plus SCIM for access lifecycle management), and own the password manager while ensuring MFA is activated wherever possible.

• Make access zero-touch: our goal is to connect most of our tools to the Identity Provider so access is granted and removed automatically. You build the integrations and automations (SSO, SCIM, low-code workflows) that make it happen.

• Deploy an MDM solution for centralised device management (device fleet, configuration, compliance).

• Review our company tooling catalogue: make sure everyone has the minimum access they need, and that security audits are up to date.

1. Security of the working environment

• Drive security best practices for the working environment (endpoint hardening, access management, ongoing team awareness such as training and phishing simulations).

• Be the go-to owner of the security of our employees' working environment.

• Security review of new tools: run the security audit on every new tool, including AI tools, and on any new way of using the tools we already have, before it is rolled out.

• Own the AI security policy: define, maintain and promote Joko's AI security policy.

1. Day-to-day run

• Access management: With tool owners, manage access across our stack (Google Workspace, Slack, Notion, Keeper, AI tools, business SaaS): permissions, roles, reviews, onboarding, offboarding and external users. Your mission: automate today's largely manual processes and make them as efficient as possible.

• Security alert & incident management: monitor, triage and handle alerts from our identity, device and endpoint security tools, and act as first responder on incidents affecting the working environment (compromised account, lost device, phishing, malware alert). Build and maintain incident response playbooks, and run post-incident reviews so we keep improving.

• Fleet management: In collaboration with the people team, device onboarding and offboarding.

• First-line employee support: helping colleagues with technical questions related to our tools.