🎯 招聘雷达

Director, Enterprise IT
Director, Enterprise IT
企业IT总监
Airalo · United Kingdom
安全面议arbeitnowremote_ok

📚 学习点

📄 原文

Help Us Build The Future of Travel At Airalo, we're making it easier for people to stay connected wherever they travel. As the world's first eSIM store, we help millions of travelers access affordable mobile data in 200+ countries and regions around the world. Today, we're a team of 400+ people across 60+ countries, building a product used by travelers every day. We've grown quickly, but we've worked hard to keep what matters: trust, ownership, and the freedom for people to do great work without unnecessary layers or bureaucracy. We're fully remote by design, genuinely global, and united by a shared mission to make travel simpler for everyone. Your Next Destination Location: Remote, anywhere in Spain or the UK. Contract: Spain: Full-time, permanent contrato indefinido via Deel (our employer of record in Spain) UK: Full-time, permanent Benefits: Learn more about our benefits here in this link - https://airalo-public.notion.site/Benefits-25396a97ffca81fb9bc1f0be479f1be3?pvs=74 Languages: English is our main working language day to day, so you'll need to be comfortable communicating in it both in meetings and async. Curious what it's actually like to work at Airalo? We've put together a guide for each of the hubs we hire from most, covering our benefits, remote culture, employment setup, and what our team values most: Life at Airalo · España : https://airalo-public.notion.site/life-at-airalo-espana Life at Airalo · United Kingdom : https://airalo-public.notion.site/life-at-airalo-united-kingdom We’re looking for a Director, Enterprise IT to build and lead a new function at Airalo. Enterprise IT is responsible for the IT estate our team members use every day and the core business systems that run the company, starting with ERP and expanding to the wider corporate application stack as we scale. This is a build-and-run role. You’ll lead an established IT Operations team (a lead and a team of four) covering service management, endpoints, networking, identity and SSO. You’ll also be the accountable technical owner of our ERP platform, from implementation into steady state. As more corporate tooling moves into your remit, you’ll recruit and structure an Enterprise Applications team and move us away from every function buying and running its own critical systems. Business functions keep ownership of their processes, data and decisions. You’ll have real ownership in shaping how systems are configured, governed and supported, and in building the team and operating model that carries us through the next stage of growth. What you’ll do: Lead the IT Operations team and its lead: set priorities and service levels, with a clear split between run and build work Own service desk performance, request and incident handling, and team member satisfaction Own endpoint and device management, including OS and software update policy, balancing compliance against minimal disruption to people’s work Own identity, SSO, access provisioning and offboarding as a single, auditable control point, and automate joiner, mover and leaver processes and other repeatable IT work Act as the accountable owner of the ERP platform, including system configuration, workflow design and ongoing maintenance. If vendor selection is still open when you join, lead its final stages with stakeholders to confirm scope, modules and implementation approach Own the design of core ERP configuration areas such as financial consolidation, budgeting and forecasting, master data, and integration with adjacent systems Manage the ERP implementation partner or systems integrator, holding them to scope, quality, timeline and budget Establish change control, testing and release processes for ERP from day one, and own the post-go-live support model (L1 to L3, vendor SLAs, release cadence) Document system configuration, data flows and integration points so no single person is a dependency Own IT general controls, segregation of duties design and monitoring, and audit evidence for corporate systems, supporting compliance certification and SOX-style financial controls where they apply Own disaster recovery, backup and resilience for corporate systems, and work with Security on access policy, device trust and approved or blocked software Partner with the Data team: Enterprise IT owns platforms, integrations and access controls, while Data keeps reporting, analytics, pipelines and data governance Set the approach to AI tools across corporate functions (tooling, access and safe-use guardrails), with functions owning day-to-day use Build the Enterprise Applications team: define roles, then hire and develop the first leads (2 to 3 additional hires expected over time) Define the roadmap and Buy / Hold / Sell decisions for bringing additional corporate technology (HR, finance, CRM, collaboration and other SaaS) under Enterprise IT, backed by a lightweight governance model: application inventory, ownership matrix and lifecycle approach Own vendor, licence and SaaS renewal management for in-scope systems, consolidating duplicate tools and spend, along with Enterprise IT’s budget and headcount plan Lead the change from function-owned tools to centrally governed systems without taking process ownership away from the business, and act as a trusted advisor to leadership on application strategy, cost and risk Must-haves: Senior leadership of an IT or enterprise applications function in a scaling business, including managing managers Led our ERP implementation from the owner’s side, including managing a systems integrator Owned a business system end to end (configuration, support and continuous improvement), rather than only overseeing third parties Experience running IT operations (service desk, endpoint and MDM, identity and SSO) in a SaaS-first estate Experience building and operating IT controls (ITGC, SoD, audit) in a finance-critical environment Experience leading organisational change, moving functions to shared ownership models while keeping their trust Comfortable operating without a large existing team or established playbook, and able to set up processes, documentation and governance from scratch Strong stakeholder management, working directly with finance, operations and other business functions as primary ERP users Strong commercial and vendor management skills Strong communicator who can translate between technical configuration detail and business outcomes Pragmatic about control: balances compliance with team member experience, without blocking people or pushing them into workarounds Nice to have: Hands-on experience configuring and administering a major ERP platform (SAP, NetSuite, Dynamics 365, Oracle, or similar), ideally including financial consolidation, budgeting or forecasting modules, and relevant platform certifications Experience of an ERP vendor selection process, including RFP evaluation, demo scenarios or business-case development Experience in an ISO 27001, SOC 2 Type 2 or SOX environment Exposure to wider enterprise application categories beyond ERP (HRIS, CRM, collaboration, identity and access management) Experience building or growing a small technology team, including hiring and role design Experience deploying AI tooling across corporate functions Experience leading remote or distributed teams Experience in a private equity-backed, high-growth or newly scaling business Why People Join Us 🇪🇸 Why people join us in Spain We started Airalo to make staying connected effortless, wherever you are in the world. Today, millions of travelers rely on our eSIMs, and many of the people building the product were customers first. Our team is united by a shared belief that great work happens when people are trusted to own what they do. As Airalo continues to grow, so do the opportunities to learn, take on new challenges, and make a real impact. For many of our teammates in Spain, it's the combination of stability, flexibility, and genuine work-life balance that makes Airalo feel like home. 🇬🇧 Why people join us in the UK We started Airalo to make staying connected effortless, wherever you are in the world. Today, millions of travelers rely on our eSIMs, and many of the people building the product first discovered us as customers. Our team spans 60+ countries, but what people often notice quickly is how work actually feels here. There's trust to own what you do, space to focus without constant layers of process, and a clear sense of what you're responsible for from day one. As Airalo continues to grow, people tend to stay for a mix of things: the chance to work on a product used globally, the autonomy to shape how they work, and the opportunity to keep taking on new challenges without getting stuck in one lane. Before You Hit Apply By applying, you acknowledge and agree that, in case of successful application, Airalo may request to run background checks as a condition for entering into an agreement with you. Rest assured that these checks will only occur upon your prior consent and at the end of the selection process, and will be strictly limited to what is allowed under the laws that are applicable to you. All data that you share or that we collect in connection with such checks will be processed in accordance with our Privacy Policy, available here: www.airalo.com/more-info/privacy-policy?srsltid=AfmBOooBT0rXAj1FaNelZ3VfN0wvhwzvAoxdtHnOKSVETpiSjiXVuycy We sincerely thank all applicants in advance for submitting their interest in this opportunity. Airalo is an equal-opportunity employer and values diversity, equity & inclusion. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We are committed to providing reasonable accommodations upon request for individuals with disabilities throughout our job interview process. Find more English Speaking Jobs in United Kingdom on Arbeitnow

🇨🇳 全文翻译

帮助我们构建旅行的未来 在Airalo,我们让人们无论旅行到哪里都能更轻松地保持连接。作为全球首家eSIM商店,我们帮助数百万旅行者在全球200多个国家和地区获得价格实惠的移动数据。 如今,我们是一个分布在60多个国家的400多人团队,打造着一款旅行者每天都在使用的产品。我们成长迅速,但我们努力保留了最重要的东西:信任、主人翁精神,以及让人们无需不必要的层级或官僚作风就能做出卓越工作的自由。 我们从设计上就是完全远程的,真正全球化,并因一个共同的使命而团结在一起:让每个人的旅行都更简单。 你的下一站 地点:远程,西班牙或英国任意地点。 合同: 西班牙:全职,永久合同contrato indefinido,通过Deel(我们在西班牙的雇主记录机构) 英国:全职,永久 福利:在此链接了解更多关于我们福利的信息 - https://airalo-public.notion.site/Benefits-25396a97ffca81fb9bc1f0be479f1be3?pvs=74 语言:英语是我们日常的主要工作语言,因此你需要能够在会议和异步沟通中自如地用英语交流。 好奇在Airalo工作实际上是什么样子?我们为招聘最多的每个中心整理了一份指南,涵盖我们的福利、远程文化、雇佣设置以及我们团队最看重的价值: Life at Airalo · España : https://airalo-public.notion.site/life-at-airalo-espana Life at Airalo · United Kingdom : https://airalo-public.notion.site/life-at-airalo-united-kingdom 我们正在寻找一位企业IT总监,在Airalo建立并领导一个新的职能。企业IT负责我们的团队成员每天使用的IT资产以及运行公司的核心业务系统,从ERP开始,并随着我们的规模扩大扩展到更广泛的企业应用栈。 这是一个构建与运营并重的角色。你将领导一个成熟的IT运营团队(一名负责人及四名成员),涵盖服务管理、终端设备、网络、身份认证与SSO。你还将担任我们ERP平台的技术负责人,从实施到稳定运行全程负责。随着更多企业工具纳入你的职责范围,你将招募并组建企业应用团队,推动我们摆脱各职能部门自行采购和运行关键系统的现状。业务部门保留对其流程、数据和决策的所有权。 你将在系统配置、治理和支持方式上拥有真正的自主权,并在组建团队和运营模式方面发挥主导作用,引领我们进入下一阶段增长。 你将做什么: 领导IT运营团队及其负责人:设定优先级和服务水平,明确划分运营与构建工作 负责服务台绩效、请求与事件处理以及团队成员满意度 负责终端与设备管理,包括操作系统和软件更新策略,在合规性与对员工工作的最小干扰之间取得平衡 将身份认证、SSO、访问权限配置与离职流程管理作为单一、可审计的控制点,并自动化入职、调动和离职流程及其他可重复的IT工作 作为ERP平台的问责负责人,包括系统配置、工作流设计和持续维护。如果你入职时供应商选型仍未确定,则与利益相关方一起主导最终阶段,确认范围、模块和实施方式 负责核心ERP配置领域的设计,如财务合并、预算与预测、主数据以及与相邻系统的集成 管理ERP实施合作伙伴或系统集成商,确保其按范围、质量、时间表和预算交付 从第一天起为ERP建立变更控制、测试和发布流程,并负责上线后支持模式(L1至L3、供应商SLA、发布节奏) 记录系统配置、数据流和集成点,确保不出现单点依赖 负责IT一般控制、职责分离设计与监控,以及公司系统的审计证据,支持合规认证和适用的SOX式财务控制 负责公司系统的灾难恢复、备份与韧性,并与安全团队合作制定访问策略、设备信任及批准或阻止的软件 与数据团队合作:企业IT负责平台、集成和访问控制,数据团队负责报告、分析、管道和数据治理 制定跨公司职能的AI工具使用方针(工具、访问和安全使用护栏),由各职能负责日常使用 组建企业应用团队:定义角色,然后招聘并培养首批负责人(预计后续增聘2至3人) 为企业IT纳入更多公司技术(HR、财务、CRM、协作及其他SaaS)定义路线图及购买/保留/出售决策,依托轻量治理模型:应用清单、归属矩阵和生命周期方法 负责范围内系统的供应商、许可证和SaaS续约管理,整合重复工具和支出,以及企业IT的预算和人员编制计划 引领从职能自有工具向集中治理系统的转变,同时不剥夺业务的流程所有权,并作为领导层在应用战略、成本和风险方面的可信顾问 必备条件: 在扩张型企业中担任IT或企业应用职能的高级领导,包括管理经理 从业主方主导过我们的ERP实施,包括管理系统集成商 端到端负责过一个业务系统(配置、支持和持续改进),而非仅监督第三方 在SaaS优先的环境中运营过IT运维(服务台、终端和MDM、身份和SSO) 在财务关键环境中建立和运营过IT控制(ITGC、SoD、审计) 领导过组织变革,将职能转向共享所有权模式同时保持其信任 能够在没有庞大现有团队或既定操作手册的情况下舒适地运作,并能从零开始建立流程、文档和治理机制 强大的利益相关者管理能力,直接与财务、运营及其他业务部门合作,作为ERP的主要用户 强大的商业和供应商管理技能 出色的沟通者,能够在技术配置细节和业务成果之间进行转化 对控制持务实态度:在合规性与团队成员体验之间取得平衡,既不阻碍员工,也不迫使他们采取变通做法 加分项: 具有配置和管理大型ERP平台(SAP、NetSuite、Dynamics 365、Oracle或类似平台)的实操经验,最好包括财务合并、预算或预测模块,以及相关平台认证 经历过ERP供应商选择流程,包括RFP评估、演示场景或商业论证开发 具有ISO 27001、SOC 2 Type 2或SOX环境下的工作经验 接触过ERP之外的更广泛企业应用类别(HRIS、CRM、协作、身份与访问管理) 有组建或发展小型技术团队的经验,包括招聘和角色设计 有在企业职能部门部署AI工具的经验 有领导远程或分布式团队的经验 有在私募股权支持、高增长或新近扩张的企业中工作的经验 人们为什么加入我们 🇪🇸 人们为什么加入我们在西班牙的团队 我们创立Airalo是为了让无论你身在世界何处,保持连接都变得轻而易举。如今,数百万旅行者依赖我们的eSIM,而许多打造产品的人最初就是我们的客户。 我们的团队因一个共同信念而团结在一起:当人们被信任去主导自己的工作,伟大的成果就会发生。随着Airalo的持续成长,学习、迎接新挑战和产生真正影响的机会也在不断增加。 对于我们在西班牙的许多队友来说,正是稳定性、灵活性和真正的工作与生活平衡的结合,让Airalo有了家的感觉。 🇬🇧 人们为什么加入我们在英国的团队 我们创立Airalo的初衷是让无论你身处世界何地,都能轻松保持连接。如今,数百万旅行者依赖我们的eSIM,而许多构建该产品的人最初也是作为用户认识我们的。 我们的团队遍布60多个国家,但人们往往很快注意到的是这里的工作氛围。这里有信任让你自主负责,有空间让你专注而不被层层流程打扰,从第一天起就清楚自己的职责所在。 随着Airalo的持续发展,人们留下来往往是因为多种因素:有机会参与一个全球使用的产品,有自主权塑造自己的工作方式,以及不断迎接新挑战而不被局限在单一领域的机会。 在申请之前 提交申请即表示您知晓并同意,若申请成功,Airalo可能会要求进行背景调查,作为与您签订协议的条件。请放心,这些调查仅在获得您事先同意的情况下、于选拔流程结束时进行,并严格限于适用法律允许的范围。您分享的或我们因此类调查收集的所有数据将依据我们的隐私政策处理,详见:www.airalo.com/more-info/privacy-policy?srsltid=AfmBOooBT0rXAj1FaNelZ3VfN0wvhwzvAoxdtHnOKSVETpiSjiXVuycy 我们在此衷心感谢所有申请人对这一机会的关注。Airalo是平等机会雇主,重视多样性、公平与包容。我们不会基于种族、宗教、国籍、性别、性取向、年龄、婚姻状况、退伍军人身份或残疾状况进行歧视。我们致力于在求职面试过程中为有残疾的申请人提供合理的便利。 在Arbeitnow上查找更多英国英语职位

🔍 深度分析

---

Airalo《Director, Enterprise IT》JD 深度分析报告

> **给读者的说明**:这份 JD 的标题是"企业 IT 总监",**它不是一个网络安全岗位**,而是"公司内部 IT + 企业应用(ERP 等)"的负责人岗位。安全只是其中一小块(身份/SSO、设备信任、IT 内控)。所以本报告会先把这个岗位的真实性质讲清楚,再逐条对照求职者(12 年安全经验、安全总监级)的背景做匹配分析。**很多安全术语在这份 JD 里其实没出现,我不会硬凑;但 JD 里出现的每一个专业名词我都会解释。**

---

0. 背景科普(给非本领域读者)

0.1 技术名词解释表(JD 里出现的每个关键术语)

> 说明:下表按"JD 原文出现顺序 + 重要性"排列。**凡 JD 原文出现的缩写/术语,一个不漏。** 表中"为什么这个岗位要它"一栏直接回扣 JD 原文。

术语一句话通俗解释为什么这个岗位要它(回扣 JD)
**eSIM**焊在手机里、不用插卡的"电子 SIM 卡",扫个码就能买当地流量这是 Airalo 的**产品本身**("world's first eSIM store"),理解公司靠什么赚钱的前提
**Enterprise IT**公司"自己人用的 IT":员工电脑、网络、账号、内部系统。区别于"卖给客户的产品技术"这就是岗位名,JD 定义它"responsible for the IT estate our team members use every day and the core business systems"
**ERP**(Enterprise Resource Planning,企业资源计划)一套把财务、采购、预算、人事等公司"后台账本"打通的大系统(如 SAP、NetSuite、Oracle)JD 说"starting with ERP",这是本岗位**最核心的一块硬骨头**,要"accountable technical owner"
**IT Operations(IT 运维)**保证员工电脑、网络、账号、服务台日常不出事、出了事能修好的那摊活JD:"lead an established IT Operations team (a lead and a team of four)"
**Service management / service desk(服务管理 / 服务台)**员工报故障、提需求的"内部客服中心" + 一套处理流程(工单、SLA)JD:"Own service desk performance, request and incident handling"
**Endpoints(终端)**员工手里的笔记本、手机、平板等"末端设备"JD:"Own endpoint and device management"
**MDM**(Mobile Device Management,移动设备管理)集中管理公司手机/电脑的软件:装什么、锁什么、丢了怎么远程擦除JD must-have:"endpoint and MDM"
**Identity / SSO**(身份 / 单点登录)一个账号登录所有系统(SSO),以及"谁能访问什么"的统一管控JD:"Own identity, SSO, access provisioning and offboarding as a single, auditable control point"
**Access provisioning / offboarding(权限开通 / 离职回收)**新员工入职开账号、离职立刻关权限的流程JD:"automate joiner, mover and leaver processes"(入职/转岗/离职,简称 JML)
**JML(Joiner-Mover-Leaver)**上面那三个流程的行业缩写JD 原文"joiner, mover and leaver processes"
**IaC(Infrastructure as Code,基础设施即代码)**⚠️ **本 JD 未出现**。若读者在其他 JD 见到:用写代码的方式管理服务器/网络配置本 JD 不要求,列出仅为对照,避免误判
**SBOM(Software Bill of Materials,软件物料清单)**⚠️ **本 JD 未出现**。软件"配料表",用于供应链安全本 JD 不要求
**Zero Trust(零信任)**⚠️ **本 JD 未出现**。核心思想"永不默认信任,每次访问都验证"本 JD 不要求,但 JD 的"identity/SSO/device trust"是零信任的落地动作之一
**K8s(Kubernetes)**⚠️ **本 JD 未出现**。容器编排系统,偏"产品技术/云原生"本 JD 不要求(这是企业 IT 岗,不是云原生岗)
**STIG / ATO / RLS**⚠️ **本 JD 未出现**。STIG=美国国防部安全配置基线;ATO=授权运营(政府/军工合规);RLS=行级安全(数据库权限)本 JD 不要求,属政府/军工/数据平台语境
**Financial consolidation(财务合并)**把母公司+各子公司的账合并成一套报表JD:"core ERP configuration areas such as financial consolidation"
**Budgeting and forecasting(预算与预测)**编预算、做滚动预测的模块JD 同上
**Master data(主数据)**全公司共用的"标准档案":客户、供应商、科目、组织架构等JD:"master data, and integration with adjacent systems"
**Systems integrator(SI,系统集成商)**帮你实施 ERP 的外部乙方/顾问公司JD:"Manage the ERP implementation partner or systems integrator"
**Change control / release(变更控制 / 发布)**改系统要走审批、测试、再上线的规矩JD:"Establish change control, testing and release processes for ERP from day one"
**L1 / L2 / L3 支持**一线客服→二线技术→三线厂商/研发的分级支持体系JD:"own the post-go-live support model (L1 to L3, vendor SLAs, release cadence)"
**ITGC**(IT General Controls,IT 一般控制)审计师查的"IT 基本功":权限、变更、备份、运维有没有规矩JD must-have:"building and operating IT controls (ITGC, SoD, audit)"
**SoD**(Segregation of Duties,职责分离)防止一个人既能"申请付款"又能"批准付款"的内控设计JD:"segregation of duties design and monitoring"
**SOX**(Sarbanes-Oxley,萨班斯法案)美国上市公司财务内控法规,要求 IT 系统有可审计的控制JD:"SOX-style financial controls where they apply"
**ISO 27001**信息安全管理体系国际标准(求职者已做过"双体系认证",大概率含此)JD nice-to-have:"Experience in an ISO 27001, SOC 2 Type 2 or SOX environment"
**SOC 2 Type 2**服务商安全/可用性审计报告(SaaS 公司常被客户要求)JD nice-to-have 同上
**Disaster recovery / backup / resilience(灾备/备份/韧性)**系统挂了怎么快速恢复、数据怎么不丢JD:"Own disaster recovery, backup and resilience for corporate systems"
**Device trust(设备信任)**只有"合规的、被管理的设备"才能访问公司系统JD:"work with Security on access policy, device trust and approved or blocked software"
**SaaS-first estate**公司系统基本都买云服务(SaaS),而非自建机房JD must-have:"running IT operations ... in a SaaS-first estate"
**HRIS**人力资源信息系统(如 Workday、BambooHR)JD nice-to-have:"HRIS, CRM, collaboration, identity and access management"
**CRM**客户关系管理系统(如 Salesforce)JD:"HR, finance, CRM, collaboration and other SaaS"
**RFP**(Request for Proposal,招标书)选型时发给供应商的"请报价+方案"文件JD nice-to-have:"RFP evaluation, demo scenarios or business-case development"
**Buy / Hold / Sell**对每个系统做"继续买/维持/淘汰"的组合决策JD:"Define the roadmap and Buy / Hold / Sell decisions"
**Application inventory / ownership matrix(应用清单/归属矩阵)**一张表:公司有哪些系统、谁负责、什么生命周期JD:"application inventory, ownership matrix and lifecycle approach"
**Deel**(Employer of Record,EOR)帮公司在没有实体的国家"合法雇人"的第三方JD:"via Deel (our employer of record in Spain)"
**Contrato indefinido**西班牙语的"无固定期限劳动合同"(≈永久合同)JD 西班牙合同形式
**Private equity-backed(PE 背景)**被私募股权基金投资/控股的公司JD nice-to-have:"private equity-backed, high-growth or newly scaling business"

> **给求职者的关键提醒**:你简历里的 STIG/ATO/RLS/IaC/SBOM/Zero Trust/K8s 这些词,**在这份 JD 里一个都没出现**。这说明这个岗位的"安全含量"很低,你的安全硬技能在这里不是主战场——真正的主战场是 **ERP 实施 + IT 运维管理 + 内控审计 + 组织搭建**。

0.2 公司赛道科普

0.3 这个岗位为什么存在(行业规律)

一个公司**什么时候才会出现"Enterprise IT 总监"这个岗**?通常是这几个条件同时成熟:

1. **人数过了一个坎**(约 300–500 人):IT 从"几个人顺手管"变成"必须有服务台、有 SLA、有设备管理"。

2. **要上 ERP**:JD 明说"starting with ERP"。公司要上 ERP(尤其涉及"financial consolidation 财务合并"),意味着**多主体、多币种、要审计**——这是公司从"创业记账"走向"规范财务"的分水岭。

3. **合规被写进合同/融资条款**:JD 提到"SOX-style financial controls""ISO 27001, SOC 2"——通常是**投资人(PE/VC)或大客户**要求公司有可审计的 IT 内控。

4. **各职能部门各自买系统、重复花钱**:JD 说"move us away from every function buying and running its own critical systems"——这是典型的"野蛮生长后要收权"阶段。

**结论**:这个岗位是"公司规模化 + 要上 ERP + 要过审计"三件事叠加的产物。**它不是安全岗,是"企业 IT + 企业应用"的从 0 到 1 搭建岗。**

---

1. 岗位速览

**一句话**:Airalo 要招一个人,**从零搭建并领导"企业 IT"这个新职能**——一手抓日常 IT 运维(服务台、终端、网络、身份/SSO),一手抓 ERP 平台的实施与长期运营,同时把散落在各职能部门手里的系统收编成"集中治理",并管好预算、供应商和内控审计。

**属于安全哪条线**:**严格说不在安全线上**。它属于"**企业 IT / 企业应用(Enterprise Applications)**"线。与安全的交集只有三块(JD 原文可回扣):

> **给求职者的判断**:如果你的目标是"安全总监/安全架构师",这个岗位**不是你的主线**;但如果你愿意把"安全负责人"扩展成"IT + 安全 + 企业应用"的更大盘子(很多公司 CIO/CISO 合一),这是一个**很好的跳板**。

---

2. 公司画像

2.1 公司做什么、规模阶段

2.2 为什么现在招这个人(从 JD 措辞推断,标注"推断")

JD 原文线索推断出的招聘动因
"build and lead a **new function**"企业 IT 是**新设职能**,之前没有统一负责人
"starting with **ERP**"公司正要/正在上 ERP,缺一个"甲方 owner"
"move us away from **every function buying and running its own** critical systems"各职能部门各自买系统,**重复花钱、数据割裂**,管理层要收权
"supporting **compliance certification** and **SOX-style** financial controls"有审计/合规压力(投资人、上市准备或大客户要求)
"**2 to 3 additional hires** expected over time"团队要扩,先招"能带人的人"
"**without a large existing team or established playbook**"承认是"荒地",要能自己搭规矩的人

2.3 市场发展(基于行业常识,标注)

---

3. 职责拆解(逐条:翻译 + 点评 + 比重推断)

> 比重为**推断**,依据是 JD 把哪些写成"Own/Lead"(核心)、哪些写成"Partner/Support"(协作)。

#JD 原文(节选)中文翻译点评(什么活/含金量/比重推断)
1"Lead the IT Operations team and its lead: set priorities and service levels, with a clear split between run and build work"领导 IT 运维团队及其负责人:定优先级和服务级别,分清"日常运维(run)"和"建设(build)"**管理活**。含金量中高(带 5 人+1 lead)。比重高,是基本盘
2"Own service desk performance, request and incident handling, and team member satisfaction"对服务台绩效、请求与事件处理、员工满意度负责**运营 KPI 活**。含金量中(偏"客服经理"),但直接对满意度,压力实。比重高
3"Own endpoint and device management, including OS and software update policy, balancing compliance against minimal disruption"管终端设备,定操作系统/软件更新策略,在合规与"别打扰员工干活"间平衡**技术+策略活**。含金量中高(MDM、更新策略是硬活)。比重中高
4"Own identity, SSO, access provisioning and offboarding as a single, auditable control point, and automate joiner, mover and leaver processes"把身份/SSO/权限开通/离职回收做成"单一可审计控制点",自动化入职转岗离职流程**安全交集最大的一条**。含金量高(IAM + 自动化)。比重中高。**这是你最能打的点**
5"Act as the accountable owner of the ERP platform ... If vendor selection is still open ... lead its final stages"做 ERP 平台的"问责 owner";若选型未定,牵头最后阶段(定范围、模块、实施方式)**本岗位最核心、最值钱的一条**。含金量极高(甲方 owner + 选型)。比重最高
6"Own the design of core ERP configuration areas such as financial consolidation, budgeting and forecasting, master data, and integration"负责 ERP 核心配置设计:财务合并、预算预测、主数据、与周边系统集成**财务+系统设计活**。含金量极高(懂财务合并的人稀缺)。比重高
7"Manage the ERP implementation partner or systems integrator, holding them to scope, quality, timeline and budget"管 ERP 实施乙方/SI,卡住范围、质量、工期、预算**乙方管理活**。含金量高(甲方管乙方是硬功夫)。比重高
8"Establish change control, testing and release processes for ERP from day one, and own the post-go-live support model (L1 to L3, vendor SLAs, release cadence)"从第一天就建 ERP 变更/测试/发布流程,负责上线后 L1–L3 支持模型**流程建设活**。含金量高("from day one"说明要建规矩)。比重中高
9"Document system configuration, data flows and integration points so no single person is a dependency"把系统配置、数据流、集成点文档化,避免"离了某人就转不动"**文档/知识管理活**。含金量中(但体现成熟度)。比重中
10"Own IT general controls, segregation of duties design and monitoring, and audit evidence ... supporting compliance certification and SOX-style financial controls"负责 IT 内控、职责分离设计与监控、审计证据,支撑合规认证和 SOX 式财务控制**合规/审计活**。含金量高(ITGC/SoD 是审计硬通货)。比重中高。**你有双体系认证,能接**
11"Own disaster recovery, backup and resilience for corporate systems, and work with Security on access policy, device trust and approved or blocked software"负责企业系统灾备/备份/韧性;与安全团队协作定访问策略、设备信任、软件黑白名单**韧性+安全协作活**。含金量中高。比重中。**注意"work with Security"= 安全另有其人**
12"Partner with the Data team: Enterprise IT owns platforms, integrations and access controls, while Data keeps reporting, analytics, pipelines and data governance"与数据团队分工:IT 管平台/集成/访问控制,数据团队管报表/分析/管道/数据治理**边界划分活**。含金量中(政治活,划清地盘)。比重中
13"Set the approach to AI tools across corporate functions (tooling, access and safe-use guardrails)"定公司职能部门的 AI 工具策略(工具、访问、安全使用护栏)**新兴活**。含金量中高(AI 治理是加分项)。比重中低但**很出彩**
14"Build the Enterprise Applications team: define roles, then hire and develop the first leads (2 to 3 additional hires)"搭企业应用团队:定角色、招并带 2–3 个 lead**组织搭建活**。含金量高(从 0 建队)。比重中高
15"Define the roadmap and Buy / Hold / Sell decisions ... backed by a lightweight governance model: application inventory, ownership matrix and lifecycle approach"定企业技术路线图和"买/维持/淘汰"决策,配轻量治理(应用清单、归属矩阵、生命周期)**组合管理活**。含金量高(应用组合治理)。比重中高
16"Own vendor, licence and SaaS renewal management ... consolidating duplicate tools and spend, along with Enterprise IT's budget and headcount plan"管供应商/许可/SaaS 续费,合并重复工具与开支,管 IT 预算和编制**成本/预算活**。含金量高(省钱是硬 KPI)。比重高
17"Lead the change from function-owned tools to centrally governed systems without taking process ownership away from the business, and act as a trusted advisor to leadership"主导"从部门自购到集中治理"的变革,但不夺走业务对流程的所有权;做管理层的可信顾问**变革管理+政治活**。含金量极高(最难的是"收权不夺权")。比重高

**总体判断**:这个岗位 **60% 是"管理 + 治理 + 变革",30% 是"ERP 甲方 owner",10% 是"技术/安全交集"**。含金量最高的是第 5、6、7、17 条(ERP owner + 乙方管理 + 变革),**恰好是纯安全背景最缺的**。

---

4. 要求清单(三档)

4.1 硬门槛(没有就没戏)

JD 原文解读求职者是否具备
"Senior leadership of an IT or enterprise applications function in a scaling business, **including managing managers**"在成长型公司做过 IT/企业应用**高级负责人**,且**管过经理**(即带过 lead)✅ 你做过安全总监、带过团队,**"managing managers"大概率满足**(需确认是否带过 lead 层)
"**Led our ERP implementation from the owner's side**, including managing a systems integrator"**甲方**主导过 ERP 实施,管过 SI❌ **最大硬伤**。安全背景通常没有 ERP 甲方实施经验
"**Owned a business system end to end** (configuration, support and continuous improvement), rather than only overseeing third parties"端到端拥有过一个业务系统(配置+支持+持续改进),**不能只是"管乙方"**⚠️ 部分。你管过安全系统(如 SIEM、IAM),但"业务系统"(财务/HR)经验存疑
"Experience running **IT operations** (service desk, endpoint and MDM, identity and SSO) in a **SaaS-first** estate"跑过 IT 运维(服务台/终端/MDM/身份 SSO),且是 SaaS 为主的环境⚠️ 部分。IAM/SSO 你强,**服务台/终端/MDM 是 IT 运维活,安全总监未必亲手管过**
"Experience building and operating **IT controls (ITGC, SoD, audit)** in a **finance-critical** environment"在财务关键环境建过 IT 内控(ITGC/SoD/审计)⚠️ 部分。你有双体系认证(ISO 27001 等),**但 ITGC/SoD/SOX 是财务审计语境,和 ISO 27001 不完全等同**
"Experience leading **organisational change**, moving functions to shared ownership models while keeping their trust"主导过组织变革(收权但不失信任)✅ 推断具备(总监级通常有跨部门推动经验),需在简历里**用案例证明**
"Comfortable operating **without a large existing team or established playbook**, able to set up processes, documentation and governance **from scratch**"能在"没团队、没现成规矩"的荒地里从 0 建流程/文档/治理✅ 你做过双体系认证(从 0 建体系),**这是强项**
"Strong **stakeholder management**, working directly with **finance**, operations and other business functions as primary ERP users"强利益相关方管理,直接对接**财务**等业务部门⚠️ 部分。安全总监对接业务可以,但"以财务为主要用户"的经验需补
"Strong **commercial and vendor management** skills"强商务/供应商管理✅ 推断具备(管过预算、采购安全产品)
"Strong communicator who can **translate between technical configuration detail and business outcomes**"能在技术细节和业务结果间翻译✅ 强项(安全负责人日常就是干这个)
"Pragmatic about control: balances compliance with team member experience, **without blocking people or pushing them into workarounds**"对控制务实:平衡合规与体验,别把人逼去"绕路"✅ 强项(安全人最懂"别把用户逼疯")

**硬门槛小结**:**11 条硬门槛里,你"完全满足"约 4 条、"部分满足"约 5 条、"明显缺失"约 1–2 条(ERP 甲方实施是致命项)**。

4.2 加分项(Nice to have)

JD 原文解读求职者
"Hands-on experience configuring and administering a major ERP platform (SAP, NetSuite, Dynamics 365, Oracle...), ideally including financial consolidation, budgeting or forecasting modules, and relevant platform certifications"亲手配置/管理过主流 ERP,最好含财务合并/预算模块,有平台认证❌ 缺。**这是最该补的加分项**
"Experience of an ERP **vendor selection** process, including RFP evaluation, demo scenarios or business-case development"参与过 ERP 选型(RFP、demo、商业论证)❌ 缺
"Experience in an **ISO 27001, SOC 2 Type 2 or SOX** environment"在 ISO 27001/SOC2/SOX 环境待过✅ **ISO 27001 你有(双体系认证)**;SOC2/SOX 需确认
"Exposure to wider enterprise application categories beyond ERP (**HRIS, CRM, collaboration, IAM**)"接触过 ERP 之外的企业应用(HRIS/CRM/协作/IAM)⚠️ IAM 你强,HRIS/CRM 弱
"Experience building or growing a **small technology team**, including hiring and role design"建过/带过小技术团队(招聘+角色设计)✅ 推断具备
"Experience deploying **AI tooling** across corporate functions"在公司职能部门部署过 AI 工具⚠️ 看经历,若有则加分
"Experience leading **remote or distributed teams**"带过远程/分布式团队⚠️ 看经历
"Experience in a **private equity-backed, high-growth or newly scaling** business"在 PE 背景/高增长/规模化公司待过⚠️ 看经历

4.3 弹性要求(可谈/可补)

---

5. 薪资分析

> **原文币种:面议(未披露)**。所以本节只能做"市场推断",标注"基于行业常识"。

5.1 换算与市场对比(推断)

5.2 当地税后粗估(推断,标注"基于行业常识,非精确")

-

打开原始链接 →