Operations Manager, IT & Security
Joko · Full-time · Posted 1w ago
At Joko, our mission is to we help consumers save time and money when shopping online or in-store.
Founded in Paris, Joko is a tech company and certified B Corp with over 120 talents across Paris, Barcelona, and New York (and beyond). More than 7 million users already save money every day at 10,000+ merchants with Joko.
From cashback and automatic coupons to price alerts, we've kept expanding our products to make shopping smarter. Today, Joko is an AI shopping app: with Juno, our shopping assistant, users can find the right product at the best price in only a few seconds, with recommendations that get sharper the more they use it.
Having reached profitability in our core market, we’re now scaling globally, with a strong focus on the US.
It’s still day 1, come build the future of shopping with us!
At Joko, the Business Operations team is the powerhouse behind internal innovation. We tackle the company’s most strategic and complex challenges and we don’t just solve them, we turn them into long-term, scalable growth engines. Whether it's launching entirely new business lines, rethinking revenue infrastructure, or embedding AI into our operations, we lead high-impact initiatives that push Joko forward faster, smarter, and stronger.
Our mission: Help Joko operate at its absolute best, every single day.
Security is Joko’s number one priority, and you will own it where it touches every employee: from every laptop to every identity and tool. You turn the initiatives already underway into a secure-by-design, automated foundation, so a fast-growing, AI-driven company can move fast, safely.
Joko is the AI shopping app that helps millions of people save time and money: 7 million users, 10,000 merchants and a team of ~120 people from 18 nationalities, heading to 200+ by the end of 2027. Enterprise-grade security (SSO, MFA, audits) is one of our six company-wide priorities for 2026, and our internal IT foundation needs to scale with us: identity management, device management, business tooling, and endpoint security. This is a rare chance to own that foundation at a pivotal moment, with a blank canvas to build on and a company-wide priority behind you. This role sits at the intersection of IT Ops and security — a cross-functional role that touches everyone in the company.
Set up an Identity Provider (company-wide SSO, plus SCIM for access lifecycle management), and own the password manager while ensuring MFA is activated wherever possible.
Make access zero-touch: our goal is to connect most of our tools to the Identity Provider so access is granted and removed automatically. You build the integrations and automations (SSO, SCIM, low-code workflows) that make it happen.
Deploy an MDM solution for centralised device management (device fleet, configuration, compliance).
Review our company tooling catalogue: make sure everyone has the minimum access they need, and that security audits are up to date.
Drive security best practices for the working environment (endpoint hardening, access management, ongoing team awareness such as training and phishing simulations).
Be the go-to owner of the security of our employees' working environment.
Security review of new tools: run the security audit on every new tool, including AI tools, and on any new way of using the tools we already have, before it is rolled out.
Own the AI security policy: define, maintain and promote Joko’s AI security policy.
Access management: With tool owners, manage access across our stack (Google Workspace, Slack, Notion, Keeper, AI tools, business SaaS): permissions, roles, reviews, onboarding, offboarding and external users. Your mission: automate today’s largely manual processes and make them as efficient as possible.
Security alert & incident management: monitor, triage and handle alerts from our identity, device and endpoint security tools, and act as first responder on incidents affecting the working environment (compromised account, lost device, phishing, malware alert). Build and maintain incident response playbooks, and run post-incident reviews so we keep improving.
Fleet management: In collaboration with the people team, device onboarding and offboarding.
First-line employee support: helping colleagues with technical questions related to our tools.
Build, don't just maintain: you choose, deploy and shape the IdP, MDM and EDR stack from day one.
Real ownership and visibility: your work is felt by every employee, every day, and directly supports one of the company's top priorities.
A pioneering topic: help define how we safely adopt AI agents and AI-powered workflows, in a company where everyone uses AI daily.
A company on the rise: 7M users, 10k merchants, and a team growing from ~120 to 200+ — with a strong international, partly remote culture.
A builder at heart: you automate everything you can, and you’d rather build a tool or workflow than repeat a manual task. Showing you’ve built and automated things matters as much as your previous experience in IT & Security.
Solid IT fundamentals (identities, device management, endpoint security, enterprise SaaS tooling), gained over ~4-7 years in IT Ops, security or systems administration.
Strong cross-functional communication: able to gather context from business teams and translate security stakes into plain language.
Rigor, autonomy, and a taste for building clear, durable processes.
Open and eager to learn on emerging topics — notably AI agents and their security — and excited to help build this area from the ground up.
Experience with an enterprise EDR / anti-malware.
Awareness of security frameworks (SOC 2, ISO 27001…).
Hands-on experience deploying an IdP (Okta, Google Workspace, Entra ID…) and/or an MDM (Jamf, Kandji, Intune…).
(Some of the benefits listed below are available to full-time positions only)
At Joko, we believe that flexibility and trust are essential. Our work environment reflects this through:
Flexible remote : If you live in Paris, you can choose to work from our office or from home with no constraints. If you live elsewhere, we can provide access to a coworking space and a coworking budget.
Work from anywhere : Want to spend a month in Italy while working? You can work from most countries in the world for up to 3 months per year.
On top of that, we offer plenty of perks:
💸 Top-market compensation
📈 Equity for everyone with the chance to own a piece of what you build
🤖 Half-day each week dedicated to leveling up with AI by exploring new tools, iterating hard, and sharpening your skills
🌴 Yearly offsite in amazing locations and budget for team-building events & monthly in-person gatherings
💪 Contribution to your ClassPass subscription
🍼 8-week leave paid 100% for the second parent
…and much more, check the full list here!
Intro call: Quick screening with the Hiring Manager or the Talent team.
Step 1 – Team interview (45 min): Conversation with two Joko team members (could include the Hiring Manager, people from the team you’d join, or colleagues from other teams).
Step 2 – Role-specific assessments
For non-engineering roles: A take-home case study followed by a 45-min interview. We assess both your output and how you think in real time. The exercise will be relevant to your role (e.g. analysis, strategy, or process design).
For engineering roles: A 90-min live technical interview on CoderPad covering code understanding, review, system design, and product thinking (with AI serving as a collaboration tool).
Step 3 – Leadership interview (45 min): Conversation with a SteerCo member and a Founder.
References: Up to 3 calls with former colleagues or managers.
☕ You may also be invited for coffee with team members to get a feel for our culture.
United States
Canada