At Joko, our mission is to we help consumers save time and money when shopping online or in-store. Founded in Paris, Joko is a tech company and certified B Corp with over 120 talents across Paris, Barcelona, and New York (and beyond).

Our Business

Operations team At Joko, the Business Operations team is the powerhouse behind internal innovation. We tackle the company's most strategic and complex challenges and we don't just solve them, we turn them into long-term, scalable growth engines. Whether it's launching entirely new business lines, rethinking revenue infrastructure, or embedding AI into our operations, we lead high-impact initiatives that push Joko forward faster, smarter, and stronger.

The role in one sentence Security is Joko's number one priority, and you will own it where it touches every employee: from every laptop to every identity and tool. 7 million users, 10,000 merchants and a team of ~120 people from 18 nationalities, heading to 200+ by the end of . Enterprise-grade security (SSO, MFA, audits) is one of our six company-wide priorities for , and our internal IT foundation needs to scale with us: identity management, device management, business tooling, and endpoint security. This role sits at the intersection of IT Ops and security - a cross-functional role that touches everyone in the company.

Your missions IT foundation & identities Set up an Identity Provider (company-wide SSO,



plus SCIM for access lifecycle management), and own the password manager while ensuring MFA is activated wherever possible. Deploy an MDM solution for centralised device management (device fleet, configuration, compliance).

Review our company tooling catalogue: make sure everyone has the minimum access they need, and that security audits are up to date. Security of the working environment Drive security best practices for the working environment (endpoint hardening, access management, ongoing team awareness such as training and phishing simulations). Be the go-to owner of the security of our employees' working environment.

Security review of new tools: run the security audit on every new tool, including AI tools, and on any new way of using the tools we already have, before it is rolled out.

Own the AI security policy: define, maintain and promote Joko's AI security policy. Day-to-day run Access management: With tool owners, manage access across our stack (Google Workspace, Slack, Notion, Keeper, AI tools, business SaaS): permissions, roles, reviews, onboarding, offboarding and external users.

Security alert & incident management: monitor, triage and handle alerts from our identity, device and endpoint security tools, and act as first responder on incidents affecting the working environment (compromised

📌 Operations Manager, It & Security (Madrid)
🏢 Joko
📍 Madrid