Automation & Cyber Security Manager

Boehringer Ingelheim; Pirbright; On-site; GBP 65,000 - 90,000; Full time

Job summary

Boehringer Ingelheim in the United Kingdom is seeking an Automation & Cyber Security Manager to safeguard OT/ICS security in a regulated manufacturing environment. The role translates global security standards to local practice, driving cyber security, automation, and data-driven improvements for production systems.

This fixed-term contract until 31 December 2027 requests knowledge of IT/OT security, GxP, GMP, IEC standards, industrial automation, and lifecycle management, with collaboration

Qualifications

• Experience in IT/OT cyber security and ISO 2700x or IEC 62443
• Experience with industrial automation and OT/IT integration
• Familiarity with GxP (GMP, GAMP5) and IEC 61508/61511

Responsibilities

• Ensure OT cyber security compliance with regulatory standards, manage CSMS, risk assessments, controls, and training
• Conduct and maintain security risk assessments, network documentation, and asset registers; implement countermeasures
• Manage OT systems lifecycle, including cyber security measures, change control, and documentation updates
• Plan and execute automation and IT projects aligned with production needs
• Lead validation and continuous improvement initiatives for OT systems
• Ensure system reliability and performance, including obsolescence management and adherence to standards
• Develop IT/IACS integration procedures for GxP and non-GxP environments
• Support OT architecture, governance, and stakeholder collaboration
• Drive change management within engineering teams for cyber security and automation
• Support deployment of BI tools and data reporting processes

Skills

IT/OT cyber security

OT architecture

Cyber security standards

Data protection

Education

Engineering/Computer Science degree

Job description

THE POSITION

The Automation & Cyber Security Manager is responsible for ensuring the secure, compliant, and reliable operation of industrial automated control systems within a regulated manufacturing environment. This role combines expertise in operational technology (OT), cyber security, and process automation to support production systems, maintain regulatory compliance, and drive the development of secure and efficient OT/IT integration. The position plays a key role in translating global security standards into local implementation and enabling continuous improvement of systems, processes, and data‑driven capabilities.

This is a fixed‑term contract until 31st December 2027.

Tasks And Responsibilities

• Ensure Operational Technology (OT) cyber security compliance with relevant regulations and standards, including management of the cyber security management system, risk assessments, controls, and training
• Conduct and maintain security risk assessments, network documentation, and asset registers, and ensure implementation of appropriate countermeasures
• Manage OT systems and equipment throughout their lifecycle, including implementation of cyber security measures, change control, and documentation updates
• Plan and execute automation and IT‑related projects, ensuring alignment with system requirements and production needs
• Act as system lead for validation and continuous improvement initiatives related to automation and OT systems
• Ensure system reliability and performance, including obsolescence management and application of functional and safety standards
• Develop and maintain procedures for integration of IT and IACS systems in both GxP and non‑GxP environments
• Support development of OT architecture, standards, and governance, and collaborate with global and local stakeholders
• Drive communication and change management within engineering teams to support implementation of cyber security and automation initiatives
• Support deployment and use of business intelligence tools and contribute to processes for data aggregation and reporting

Requirements

• Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443
• Experience with industrial automation systems and OT architecture, including integration with IT systems
• Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511
• Understanding of cyber security risk assessments, controls, and system documentation
• Experience in system lifecycle management, including validation, change control, and documentation practices
• Knowledge of data protection and information protection principles
• Ability to collaborate with multiple stakeholders and work within a matrix organisation
• Degree in engineering, computer science, or a related field, or equivalent experience
• Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred

A Disclosure and Barring Service (DBS) check will be required for the successful candidate. Any offer of employment will be subject to satisfactory DBS certificate.