IT Infrastructure & Security Manager

Inceptua S.A.; Berlin; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

Inceptua S.A. is seeking an IT Infrastructure & Security Manager based in Berlin, Germany. The ideal candidate will define and manage the IT infrastructure and security strategy while leading a global team. This role includes overseeing cloud infrastructure, network management, and developing security policies.

The position is full-time with a hybrid schedule (three days in-office, two days remote). Candidates should have at least 6 years of relevant experience and be comfortable in an international work environment.

Qualifikationen

• 6+ years in IT infrastructure or security.
• Experience leading or mentoring a technical team.
• Comfortable with Azure as an infrastructure platform.
• Familiarity with regulated environments like pharma.
• Excellent written and verbal communication in English.

Aufgaben

• Define and own IT infrastructure and security strategy.
• Govern cloud infrastructure across multiple providers.
• Manage network infrastructure and endpoint management.
• Develop and maintain IT security policies.
• Lead incident response and business continuity planning.

Kenntnisse

IT infrastructure management

Security management

Team leadership

Azure platform expertise

Network fundamentals

Critical thinking

Ausbildung

Recognized certification (CISM, CISSP)

Tools

Microsoft Security Stack

Azure

GCP

AWS

StackIT

Jobbeschreibung

We are hiring for the newly created position of IT Infrastructure & Security Manager, based in our office in Berlin, Germany or Windsor, UK.

You will report to our VP, Global IT, and join a global IT team operating across three continents.

Responsibilities include, but are not limited to:

• Define and own our IT infrastructure and security strategy covering cloud, network, endpoints, and identity, and translate that into standards the team can actually work to.
• Govern our cloud infrastructure across providers (primarily Azure, with GCP, AWS, and StackIT in use or planned): resource architecture, cost governance, patching standards, and lifecycle management.
• Own our network infrastructure: WAN design, office connectivity, VPN architecture, and segmentation across a three-continent footprint with an eye on both performance and security.
• Set endpoint management standards: Autopilot/Intune deployment profiles, application packaging policy, and endpoint compliance configuration – the team delivers, but the standard is yours.
• Own our identity and access architecture: Entra ID, Privileged Identity Management, Conditional Access, and the rules governing what external partners are and aren’t permitted to access.
• Maintain an IT risk register that is actually used, not a once-a-year exercise. Translate findings into clear language for senior management and, where relevant, for sponsor audits.
• Develop and maintain IT security policies and SOPs with a good understanding of what GxP, Annex 11, and GAMP5 mean for IT infrastructure in a pharma environment.
• Partner with Data Protection and Quality teams to ensure privacy and compliance by design across our systems and clinical trial data handling.
• Own IT asset and licence management policy: hardware lifecycle, software licence inventory, contract renewal, and infrastructure budget oversight (OPEX/CAPEX).
• Lead incident response when things go wrong: containment, recovery, root cause, and reporting, including regulatory and executive communication.
• Run or commission penetration tests and security assessments; track remediation to completion.
• Own our Business Continuity and Disaster Recovery planning and make sure restore tests actually happen.
• Drive the organisation’s security awareness culture: training, practical communications, and constructive course corrections when things slip.
• Play a key role in building out your new team, assisting with the interviewing, hiring, and scaling of the engineers you will lead.

Your profile:

• You have 6+ years in IT infrastructure, security, or a role that genuinely covered both, not one with a dash of the other.
• You have led or mentored a small technical team before, not as a people manager by title, but as someone engineers actually look to for direction.
• You know Microsoft’s security stack well: Entra ID, Defender, Conditional Access, and PIM well enough to review what the team has configured and know whether it’s right.
• You are comfortable with Azure as an infrastructure platform, not just a security tool: VM administration, networking, resource governance, and cost management. Experience with GCP, AWS, or StackIT is a plus.
• You understand network fundamentals at a level where you can make architecture decisions: routing, segmentation, VPN, and firewall policy.
• You have worked in a regulated environment before – pharma, life sciences, medtech, or similar. Familiarity with Annex 11 or GAMP5 is a real advantage; the ability to get there quickly is the minimum.
• You know what good looks like in an IT vendor contract from a security perspective: access controls, audit rights, change documentation, and you’ve actually had to enforce it.
• You can write a risk finding that a CFO will read and understand, and a technical spec that an engineer can implement. Both matter in this role.
• A recognised certification (CISM, CISSP, or equivalent) is preferred, or evidence you’re working toward one.
• You’ve operated in an international environment and are used to working across time zones, cultures, and organisational layers. Fluent business English is required.
• You are a low-ego collaborator who finds satisfaction in the team’s overall security and stability, and you are comfortable making unpopular calls when the situation requires it.

This position is full-time with a hybrid schedule (three fixed days per week in the office, two days remote).

Our company is home to employees from diverse backgrounds who speak a range of languages. With teams across different locations and cultures, we value diversity and believe that inclusive collaboration makes us stronger.

If you have a forward-thinking attitude and are ready to go the extra mile with us, we look forward to receiving your application.