IT Infrastructure & Security Manager

We are hiring for the newly created position of IT Infrastructure & Security Manager , based in our office in Berlin, Germany or Windsor, UK .

You will report to our VP, Global IT, and join a global IT team operating across three continents.

Responsibilities include, but are not limited to:

• Define and own our IT infrastructure and security strategy covering cloud, network, endpoints, and identity, and translate that into standards the team can actually work to.
• Govern our cloud infrastructure across providers (primarily Azure, with GCP, AWS, and StackIT in use or planned): resource architecture, cost governance, patching standards, and lifecycle management.
• Own our network infrastructure: WAN design, office connectivity, VPN architecture, and segmentation across a three-continent footprint with an eye on both performance and security.
• Set endpoint management standards: Autopilot/Intune deployment profiles, application packaging policy, and endpoint compliance configuration – the team delivers, but the standard is yours.
• Own our identity and access architecture: Entra ID, Privileged Identity Management, Conditional Access, and the rules governing what external partners are and aren’t permitted to access.
• Maintain an IT risk register that is actually used, not a once-a-year exercise. Translate findings into clear language for senior management and, where relevant, for sponsor audits.
• Develop and maintain IT security policies and SOPs with a good understanding of what GxP, Annex 11, and GAMP5 mean for IT infrastructure in a pharma environment.
• Partner with Data Protection and Quality teams to ensure privacy and compliance by design across our systems and clinical trial data handling.
• Own IT asset and licence management policy: hardware lifecycle, software licence inventory, contract renewal, and infrastructure budget oversight (OPEX/CAPEX).
• Lead incident response when things go wrong: containment, recovery, root cause, and reporting, including regulatory and executive communication.
• Run or commission penetration tests and security assessments; track remediation to completion.
• Own our Business Continuity and Disaster Recovery planning and make sure restore tests actually happen.
• Drive the organisation’s security awareness culture: training, practical communications, and constructive course corrections when things slip.
• Play a key role in building out your new team, assisting with the interviewing, hiring, and scaling of the engineers you will lead.

Your profile:

• You have 6+ years in IT infrastructure, security, or a role that genuinely covered both, not one with a dash of the other.
• You have led or mentored a small technical team before, not as a people manager by title, but as someone engineers actually look to for direction.
• You know Microsoft’s security stack well: Entra ID, Defender, Conditional Access, and PIM well enough to review what the team has configured and know whether it’s right.
• You are comfortable with Azure as an infrastructure platform, not just a security tool: VM administration, networking, resource governance, and cost management. Experience with GCP, AWS, or StackIT is a plus.
• You understand network fundamentals at a level where you can make architecture decisions: routing, segmentation, VPN, and firewall policy.
• You have worked in a regulated environment before – pharma, life sciences, medtech, or similar. Familiarity with Annex 11 or GAMP5 is a real advantage; the ability to get there quickly is the minimum.
• You know what good looks like in an IT vendor contract from a security perspective: access controls, audit rights, change documentation, and you’ve actually had to enforce it.
• You can write a risk finding that a CFO will read and understand, and a technical spec that an engineer can implement. Both matter in this role.
• A recognised certification (CISM, CISSP, or equivalent) is preferred, or evidence you’re working toward one.
• You’ve operated in an international environment and are used to working across time zones, cultures, and organisational layers. Fluent business English is required.
• You are a low-ego collaborator who finds satisfaction in the team’s overall security and stability, and you are comfortable making unpopular calls when the situation requires it.

This position is full-time with a hybrid schedule (three fixed days per week in the office, two days remote).

Our company is home to employees from diverse backgrounds who speak a range of languages. With teams across different locations and cultures, we value diversity and believe that inclusive collaboration makes us stronger.

If you have a forward-thinking attitude and are ready to go the extra mile with us, we look forward to receiving your application.