IT Operations Analyst

Screenrights is a not-for-profit copyright collecting society. We licence the copying and communication of film and television content for educational and government use across Australia and New Zealand, and we distribute royalties to the people who made it. We're a small team handling a large volume of sensitive data under statutory obligations which means reliable, well-governed technology isn't a nice-to-have, it's how we keep our commitments to the screen industry.

We're creating a dedicated IT Operations Analyst role for the first time. This is deliberately a build-and-run position: you'll resolve today's requests while putting in place the processes, registers and documentation that should already exist. 

If you've ever looked at an IT environment and thought "I could sort this out properly given the chance" this is that chance.

What you'll be doing

You'll be the hands-on owner of day-to-day IT operations, reporting to our Lead DevSecOps Engineer and supported by the wider Engineering Team and our managed service provider for escalated technical work.

Support people well. Be the first point of contact for staff IT requests and incidents, in the office and for remote workers. You'll stand up a single intake channel and a lightweight ticketing system so nothing gets lost, set and report against response targets, and fix the root cause of recurring issues rather than repeating the same fix. You'll also keep our meeting rooms and AV running for internal, hybrid and board meetings.

Get onboarding and off-boarding right. Own a documented joiner–mover–leaver process agreed with People & Culture. New starters arrive at a tested, role-based access profile ready before day one. Leavers are offboarded to a checklist on the day: accounts disabled, sessions and MFA revoked, licences reclaimed, data transferred, devices collected and wiped, third-party access removed. You'll also clean up the legacy, orphaned and shared accounts we've accumulated, then run recurring access reviews so the backlog doesn't rebuild.

Take control of licences, subscriptions and IT spend. Build and maintain a complete subscription and licence register, run quarterly seat and utilisation reviews, reconcile IT spend with Finance monthly, and bring shadow IT and unapproved SaaS (including AI tools picked up outside the approval process) under control.

Manage vendors and contracts. Maintain a central contract register and a renewal calendar that triggers a review well before any notice deadline so nothing rolls over untested. You'll test value before renewal and present a renew, renegotiate or exit recommendation. Commercial decisions sit with the Head of Engineering & Data; your job is the analysis behind them.

Look after assets, endpoints and the server room. Keep a single asset register, manage endpoints to a standard build with enforced configuration, patching, encryption and remote wipe, and run a preventative maintenance schedule covering firmware, backup verification, UPS testing, environmental checks, cabling and physical access. You'll bring the server room to a documented, labelled and safe standard and keep it there. You'll also verify that backups actually restore.

Document, automate and support security. Write runbooks a competent colleague could follow unassisted. Automate the repetitive work: provisioning, licence assignment, device enrolment, reporting. Support our uplift against the ACSC Essential Eight and our Privacy Act obligations, and contribute evidence to audit, insurance and incident response.

What we're looking for

• At least two years in IT support, service desk or IT operations. ideally somewhere small or mid-sized where you covered a broad scope

• For the person with the right attitude to learn & proactive approach, we may consider fresh grads as well.

• Hands-on administration: users, groups, licence assignment, mailboxes, workspace permissions and MFA

• Endpoint support across platforms, including exposure to a modern device management platform (we use Kandji)

• A practical understanding of the user access lifecycle, and why timely, complete revocation matters comfortable working to a checklist and retaining evidence

• Real organisation and follow-through: registers, calendars and documentation stay accurate without anyone chasing you

• Clear writing, readable process documentation, and the ability to explain technical things to non-technical colleagues, with a genuine service orientation

• Solid troubleshooting across networking fundamentals (DNS, DHCP, Wi-Fi, VPN, switching), and willingness to do hands-on physical work in a server room

• Australian working rights, and availability to be in our Sydney office Tuesday, Wednesday and Thursday

Nice to have: introducing or running a ticketing/ITSM platform and defining service levels; scripting and automation; software asset management or IT vendor and contract administration; familiarity with the ACSC Essential Eight and Australian privacy obligations; backup and restore testing; Teams Rooms or Zoom Rooms AV support; an interest in the not-for-profit, screen or cultural sector.

Few people will tick every box. If you meet the essentials and you're motivated by building something properly from the ground up, we'd like to hear from you.

The practical details

• Full time, ongoing

• Hybrid: Tuesday, Wednesday and Thursday on site in our Sydney office; Monday and Friday remote by agreement. On-site presence matters here given the device, AV and server-room responsibilities.

• Occasional work outside standard hours for maintenance windows, system changes or incident response arranged in advance, with time-in-lieu. Some physical work is involved, including lifting and installing equipment and cabling.

• Appointment is subject to satisfactory reference checks, evidence of Australian working rights.