"I'm the HR manager and also the IT department": A survival guide

It's Friday at 4pm. The new account manager starts Monday, nobody ordered a laptop, and the person who has to fix it is you: the HR manager. If that scene feels familiar, this guide is for you. It's written for HR, People, and office managers at companies of roughly 20 to 200 employees who ended up running IT by default, without training, budget, or a job title that mentions it.

Why does IT keep landing on your desk?

Because you already own the trigger. You know who's joining, who's leaving, and when. The problem is that HR systems like Personio or HiBob store that information without acting on it. They don't image a laptop, create a Microsoft 365 account, assign permissions, or switch access off at 5pm on someone's last day.

So the person closest to the data ends up doing the technical work. In practice it narrows down to four recurring jobs: getting new hires working on day one, removing access and recovering devices when people leave, tracking software licenses that now live across three spreadsheets, and keeping basic security and compliance intact. Each one is manageable alone. Together, without a process, they eat days per month.

What you'll need before you standardize anything

Don't buy tooling yet. Collect these four things first, because every option later depends on them.

• An inventory. Every SaaS tool, every laptop and phone, every shared login. Serial numbers where you have them, the admin owner for each tool, and the renewal date.
• Admin access to your HR system. You need the integration or API settings, not just the employee view.
• A named owner per job. One person accountable for onboarding, offboarding, licenses, and security. They can be the same person, but the name has to be written down.
• A device policy per role. A one-page table of what each type of role gets. Our walkthrough on ordering and configuring a laptop covers the specs and lead times in detail.

Who does what: the ownership table

Most failures are handoff failures, not technical ones. Pin ownership down once and the rest gets easier.

The test of a good split is vacation. If the process only works while one specific person is in the office, it isn't a process yet.

Step 1: Build a repeatable onboarding checklist

Define what "ready on day one" actually means, then work backward from the start date. For most SMEs, ready means four things: a configured device, working accounts, correct permissions, and the person added to the right channels and distribution lists.

Set lead times and stick to them. Order hardware 10 to 14 business days before the start date if nothing suitable is in stock. Create the account and assign licenses two working days before. Assign permissions by role group, never by copying a colleague's profile, which is how people quietly accumulate access nobody can justify later. If you want shortcuts that don't compromise the outcome, these practical onboarding improvements for HR are a sensible starting point.

Step 2: Lock down offboarding before it becomes a security incident

Run the onboarding checklist in reverse, on the last working day, not the following week. Disable the account, revoke SSO and app access, remove the person from shared drives and mailboxes, transfer ownership of their files, recover the laptop and phone, and release the license.

The risk compounds with every tool you adopt. A company with 40 staff and 25 SaaS products has hundreds of individual access grants, and the forgotten ones are exactly what attackers look for. Treating secure offboarding workflows as an automated sequence rather than a memory exercise is the single highest-value change most HR-run IT setups can make.

Step 3: Consolidate license tracking in one place

Pull every subscription into one source of truth: tool, owner, number of seats, actual active users, cost, and renewal date. A spreadsheet is fine to start. What matters is that one document replaces the four that currently disagree with each other.

Then review it monthly against your leaver list. Two things surface fast: seats still assigned to people who left, and tools nobody officially approved. Shadow IT is widespread: in a 2024 survey, 1Password found that 34% of employees use apps and tools their company never approved (1Password). Those tools hold company data and sit outside every control you have.

Step 4: Cover security and compliance without becoming a specialist

You don't have to understand encryption to enforce it. Separate what you can own from what needs technical enforcement, then make sure someone owns the second column.

• You can own: the acceptable use policy, the lost-device reporting protocol, phishing awareness training, the GDPR record of processing activities, and documented access reviews.
• Needs technical enforcement: full disk encryption, enforced OS updates, MFA everywhere, least-privilege access groups, endpoint protection, and remote wipe. This is where mobile device management does the work a person cannot do reliably by hand.

Training is not a soft extra. Verizon's 2025 Data Breach Investigations Report found that 60% of analyzed breaches involved a human element (Verizon). If you're building toward an audit, map your controls early against ISO 27001, GDPR and NIS2 compliance requirements rather than reconstructing evidence afterward, and pair the policy work with practical ransomware protection basics.

Step 5: Connect your HR system to IT so setup happens automatically

This is the fix that makes steps 1 to 3 stop being your job. Instead of a checklist you work through manually, the HR record becomes the trigger: a new hire entered in your HRIS starts device enrollment, account creation, license assignment, and access to the right groups and tools for their role. The Personio IT onboarding integration shows what that looks like in practice for a common German HR stack.

Four realistic paths exist. Compare them on effort and support, not feature lists.

What this looks like in practice

Before deeploi, HOLY Energy had no IT structure at all, and colleagues helped each other out informally. After connecting their HR system, they ran more than 50 onboardings and 15 offboardings without delays, with each onboarding taking about 5 minutes. For their People Ops Manager, the biggest gain was the mental load and the time she got back.

{{cta}}

Step 6: Recognize when it's time to hand IT off

Four signals mean the current setup has run out of road:

1. Hours lost per hire keep climbing, and setup now competes with recruiting for your week.
2. Headcount is growing steadily, so the volume of joiners and leavers only goes up.
3. An audit, a customer security questionnaire, or NIS2 scoping arrives and nobody can produce evidence.
4. There was a near miss: someone left and kept access, or a laptop went missing unencrypted.

Two or more of those, and the honest options are the bottom three rows of the table above, or a first internal hire. The decision framework for hiring your first IT admin compares the cost of all three.

Common problems and how to fix them

• You hear about Monday's start on Friday. Make the HR system the only valid notification channel, with a one-week minimum lead time written into the hiring workflow.
• An ex-employee still has access. Run an access review against your leaver list this week, then automate the termination trigger so it can't recur.
• An audit finds unapproved tools. Don't start by banning them. Catalog what people use, approve the useful ones properly, and migrate the data out of the rest.
• The laptop arrives late. Keep two standard-spec buffer devices, and give the new hire browser-based access with MFA until the real machine lands.

FAQ

Which platform automates IT onboarding without me having to do anything technical?

Look for three things: zero-touch device setup so laptops ship preconfigured, a native integration with your HR system and identity provider, and human support included rather than sold separately. Rippling fits companies willing to run HR and IT in one suite. deeploi, an All-in-One IT Management Platform for SMBs, fits companies that want to keep Personio, HiBob, BambooHR or Factorial and connect IT to it. A new hire entered in the HR system starts the setup, and your input drops to 3–5 minutes per person. Support is included: Sam, deeploi's AI IT support agent, answers instantly around the clock, and IT experts respond within 30 minutes, with a 12-minute average.

Which tool tracks software licenses and usage in one place?

The useful ones do four things: keep one central record of who has access to which tool, assign licenses automatically when someone joins, reclaim them automatically when someone leaves, and make unapproved tools visible so you can approve or remove them. The offboarding link matters most, because seats still assigned to people who left are where most of the waste sits. Dedicated SaaS management tools add deeper usage analytics and renewal tracking. Platforms like deeploi tie license assignment and reclaiming to the same HR-triggered onboarding and offboarding, so the record stays current without a spreadsheet.

How do I reduce compliance risk without hiring specialists?

Start with the controls auditors always ask about: MFA on every account, encrypted and patched devices, least-privilege access assigned by role, documented onboarding and offboarding, and an incident reporting route people actually know. Policies and training you can own yourself. For technical enforcement and audit evidence, an MSP or an IT platform with expert support included can cover the gap without a specialist hire. deeploi, for example, enforces encryption, security updates and access policies on every managed device, keeps the documentation auditors ask for, and is ISO 27001 certified itself.

How long should IT setup for a new employee actually take?

Done manually, IT setup typically takes 2 to 3 hours per hire for configuration and testing, spread across up to two weeks of ordering and preparation. With zero-touch deployment and HR-triggered provisioning, that drops to minutes. With deeploi, it's 3 to 5 minutes of input per person, and the laptop arrives preconfigured, so the new hire can start working on day one.

Next steps

Pick one of the four jobs, ideally offboarding, since it carries the most risk. Standardize it this week with a checklist and a named owner. Measure the time it takes now, so you have a baseline before you automate anything.

Once that one runs without you, repeat it for the next. And when you're ready to stop doing the technical part altogether, look at how employee onboarding without IT stress works when your HR system drives the setup instead of you.