Security & IT Operations Lead (Identity, Device & Endpoint Security) at Joko

At Joko, our mission is to help consumers save time and money when shopping online or in-store. Founded in Paris, Joko is a tech company and certified B Corp with over 120 talents across Paris, Barcelona, and New York (and beyond). More than 7 million users already save money every day at 10,000+ merchants with Joko.

From cashback and automatic coupons to price alerts, we've kept expanding our products to make shopping smarter. Today, Joko is an AI shopping app: with Juno, our shopping assistant, users can find the right product at the best price in only a few seconds, with recommendations that get sharper the more they use it.

Having reached profitability in our core market, we’re now scaling globally, with a strong focus on the US.

🔥 Our Business Operations team

At Joko, the Business Operations team is the powerhouse behind internal innovation. We tackle the company’s most strategic and complex challenges and we don’t just solve them, we turn them into long-term, scalable growth engines. Whether it's launching entirely new business lines, rethinking revenue infrastructure, or embedding AI into our operations, we lead high-impact initiatives that push Joko forward faster, smarter, and stronger.

Our mission: Help Joko operate at its absolute best, every single day.

🦾 The role in one sentence

Security is Joko’s number one priority, and you will own it where it touches every employee: from every laptop to every identity and tool. You turn the initiatives already underway into a secure-by-design, automated foundation, so a fast-growing, AI-driven company can move fast, safely.

🎯 Context

Joko is the AI shopping app that helps millions of people save time and money: 7 million users, 10,000 merchants, and a team of ~120 people from 18 nationalities, heading to 200+ by the end of 2027. Enterprise-grade security (SSO, MFA, audits) is one of our six company-wide priorities for 2026, and our internal IT foundation needs to scale with us: identity management, device management, business tooling, and endpoint security. This is a rare chance to own that foundation at a pivotal moment, with a blank canvas to build on and a company-wide priority behind you. This role sits at the intersection of IT Ops and security — a cross-functional role that touches everyone in the company.

🚀 Your missions

1. IT foundation & identities

• Set up an Identity Provider (company-wide SSO, plus SCIM for access lifecycle management), and own the password manager while ensuring MFA is activated wherever possible.

• Make access zero-touch: our goal is to connect most of our tools to the Identity Provider so access is granted and removed automatically. You build the integrations and automations (SSO, SCIM, low-code workflows) that make it happen.

• Deploy an MDM solution for centralized device management (device fleet, configuration, compliance).

• Review our company tooling catalogue: make sure everyone has the minimum access they need, and that security audits are up to date.

2. Security of the working environment

• Drive security best practices for the working environment (endpoint hardening, access management, ongoing team awareness such as training and phishing simulations).

• Be the go-to owner of the security of our employees' working environment.

• Security review of new tools: run the security audit on every new tool, including AI tools, and on any new way of using the tools we already have, before it is rolled out.

• Own the AI security policy: define, maintain, and promote Joko’s AI security policy.

3. Day-to-day run

• Access management: With tool owners, manage access across our stack (Google Workspace, Slack, Notion, Keeper, AI tools, business SaaS): permissions, roles, reviews, onboarding, offboarding, and external users. Your mission: automate today’s largely manual processes and make them as efficient as possible.

• Security alert & incident management: monitor, triage, and handle alerts from our identity, device, and endpoint security tools, and act as the first responder on incidents affecting the working environment (compromised account, lost device, phishing, malware alert). Build and maintain incident response playbooks, and run post-incident reviews so we keep improving.

• Fleet management: In collaboration with the people team, device onboarding and offboarding.

• First-line employee support: helping colleagues with technical questions related to our tools.

💚 Why you'll love this role

• Build, don't just maintain: you choose, deploy, and shape the IdP, MDM, and EDR stack from day one.

• Real ownership and visibility: your work is felt by every employee, every day, and directly supports one of the company's top priorities.

• A pioneering topic: help define how we safely adopt AI agents and AI-powered workflows, in a company where everyone uses AI daily.

• A company on the rise: 7M users, 10k merchants, and a team growing from ~120 to 200+ — with a strong international, partly remote culture.

👀 Who we're looking for

• A builder at heart: you automate everything you can, and you’d rather build a tool or workflow than repeat a manual task. Showing you’ve built and automated things matters as much as your previous experience in IT & security.

• Solid IT fundamentals (identities, device management, endpoint security, enterprise SaaS tooling), gained over ~4-7 years in IT Ops, security, or systems administration.

• Strong cross-functional communication: able to gather context from business teams and translate security stakes into plain language.

• Rigor, autonomy, and a taste for building clear, durable processes.

• Open and eager to learn on emerging topics — notably AI agents and their security — and excited to help build this area from the ground up.

✨ What would make the difference (nice to have)

• Experience with an enterprise EDR / anti-malware.

• Awareness of security frameworks (SOC 2, ISO 27001…).

• Hands-on experience deploying an IdP (Okta, Google Workspace, Entra ID…) and/or an MDM (Jamf, Kandji, Intune…).