Own day-to-day IT and information security operations for a fully remote Mac fleet. Responsibilities include endpoint lifecycle management, identity and access administration, Google Workspace, helpdesk support, asset coordination, CrowdStrike EDR monitoring, DLP controls, Datadog SIEM alerting, security hygiene, access reviews, and SOC 2 and PCI evidence collection. The role requires autonomous ownership, automation, clear documentation, cross-functional collaboration, and approximately 4–6 years of experience beyond ticket-only support.
IT / Information Security Analyst II
About the roleBloom Credit is hiring an IT / Information Security Analyst II to own day-to-day IT operations and hands-on security work across a fully remote Mac fleet. This is a combined role: roughly 50/50 IT and IS in theory, with the mix shifting by project and business need.
You will work with strong support from the Head of IT/IS and partner across the entire organization—engineering, compliance, product, people ops, and other functions—as identity, devices, access, and security touch every team. You operate with high autonomy in a remote environment.
We maintain SOC 2 and PCI DSS (self-attested) obligations. Experience supporting audits and evidence collection is valued.
What you'll own (Analyst II)IT operations- Endpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)
- Identity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner–mover–leaver flows
- Google Workspace administration (mail, groups, Drive, Meet) and related automation where useful
- Helpdesk / end-user support: clear triage, resolution, and documentation
- Asset lifecycle coordination (procurement, shipping, disposition) with existing tooling
- Prefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented
- CrowdStrike EDR health, detections, containment, and response coordination
- DLP controls and data-handling practices in daily ops, including policy tuning and exception handling
- SIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)
- Security hygiene: least privilege, access reviews, device posture, exception handling
- Support SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical
- Zero Trust mindset preferred (identity-centric access, device trust, least privilege)—not required if you learn fast in this model
- Endpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)
- Identity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner–mover–leaver flows
- Google Workspace administration (mail, groups, Drive, Meet) and related automation where useful
- Helpdesk / end-user support: clear triage, resolution, and documentation
- Asset lifecycle coordination (procurement, shipping, disposition) with existing tooling
- Prefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented
- CrowdStrike EDR health, detections, containment, and response coordination
- DLP controls and data-handling practices in daily ops, including policy tuning and exception handling
- SIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)
- Security hygiene: least privilege, access reviews, device posture, exception handling
- Support SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical
- Zero Trust mindset preferred (identity-centric access, device trust, least privilege)—not required if you learn fast in this model
No single path is required. Degrees, certifications, and on-the-job experience are weighed equally.
- College - Associate's or bachelor's in IT, cybersecurity, CS, or related—or equivalent practical experience
- Certifications - 1–2 relevant certs (e.g. Security+, Google Workspace Admin, JumpCloud, CrowdStrike, CySA+, GSEC) or equivalent demonstrated depth
- On-the-job - ~4–6 years with ownership beyond ticket-only work; can run identity/endpoint/security ops with light oversight
- Fully remote; no traditional office network—access is identity- and device-centric
- Prefer native vendor integrations, then maintained scripts/automation, then console click-ops when that is the right business case
- High-impact actions require clear scope, blast radius, and rollback thinking; Head of IT/IS approves before execution
- Head of IT/IS available for support, escalation, and prioritization—not day-to-day micromanagement
- Clear, concise written communication across the org
- Calm triage under interruption (helpdesk + security signals)
- Ownership of outcomes without waiting to be told
- Collaborative posture—enable teams, don't gatekeep for its own sake
Similar Jobs at Bloom Credit
Fintech • Financial Services
Own client implementation projects from contract signing through go-live. Build and maintain project plans, track risks and blockers, coordinate internal and client stakeholders, manage communication and expectations, secure required documents and approvals, escalate delays, and improve implementation processes. Serve as the client’s primary point of contact while coordinating technical and account teams without owning technical decisions or commercial relationships.
Top Skills:
APIsB2B Saas
Fintech • Financial Services
Execute Bloom Credit’s B2B marketing engine across ABM, content, social media, events, sales enablement, and digital channels. Manage HubSpot workflows and data hygiene, maintain marketing assets and partner toolkits, coordinate trade shows, webinars, newsletters, and collateral, track competitor activity, reconcile marketing expenses, and report weekly on website, traffic, conversion, and campaign metrics.
Top Skills:
BomboraCanvaFi NavigatorFigmaGoogle AnalyticsHubspot CrmLinkedInLinkedin Sales NavigatorPowerPointPpcSeo
Fintech • Financial Services
Owns Bloom Credit’s production support and incident response function, including monitoring, incident coordination, root cause analysis, documentation, metrics, and preventive improvements. Supports client-facing Operations with onboarding, offboarding, and troubleshooting tasks while automating repetitive workflows using scripts. Partners with engineering, operations, and product teams to improve system reliability, reduce support overhead, and strengthen incident response processes.
Top Skills:
Ai Agentic ToolsBashDatadogPagerdutyPython
What you need to know about the Montreal Tech Scene
With roots dating back to 1642, Montreal is often recognized for its French-inspired architecture and cobblestone streets lined with traditional shops and cafés. But what truly sets the city apart is how it blends its rich tradition with a modern edge, reflected in its evolving skyline and fast-growing tech industry. According to economic promotion agency Montréal International, the city ranks among the top in North America to invest in artificial intelligence, making it le spot idéal for job seekers who want the best of both worlds.
Key Facts About Montreal Tech
- Number of Tech Workers: 255,000+ (2024, Tourisme Montréal)
- Major Tech Employers: SAP, Google, Microsoft, Cisco
- Key Industries: Artificial intelligence, machine learning, cybersecurity, cloud computing, web development
- Funding Landscape: $1.47 billion in venture capital funding in 2024 (BetaKit)
- Notable Investors: CIBC Innovation Banking, BDC Capital, Investissement Québec, Fonds de solidarité FTQ
- Research Centers and Universities: McGill University, Université de Montréal, Concordia University, Mila Quebec, ÉTS Montréal
