Automation & Cyber Security Manager

Boehringer Ingelheim; Pirbright; On-site; GBP 70,000 - 110,000; Full time

Job summary

Boehringer Ingelheim is seeking an Automation & Cyber Security Manager to secure industrial OT/IT environments within a regulated manufacturing setting. You will translate global security standards to local implementations, drive OT architecture, governance, and data-driven improvements, and support cross-functional teams in a matrix organisation.

This fixed-term contract runs until 31 December 2027, with duties spanning risk assessments, lifecycle management, project planning, and change

Qualifications

• Knowledge of IT and/or OT cyber security frameworks (ISO 2700x, IEC 62443).
• Experience with industrial automation systems and OT architecture.
• Familiarity with GxP (GMP, GAMP5) and IEC 61508/61511 standards.

Responsibilities

• Ensure OT cyber security compliance, manage cyber security program, risk assessments, controls and training.
• Conduct security risk assessments, maintain asset registers, and implement countermeasures.
• Manage OT systems lifecycle, including validation, change control, and documentation updates.
• Plan and execute automation and IT projects aligned with production needs.
• Lead validation and continuous improvement initiatives for automation and OT systems.
• Ensure system reliability and performance, including obsolescence management.

Skills

OT cyber security

Industrial automation

GxP compliance

ISO 2700x / IEC 62443

IEC 61508/61511

Change control

Documentation

Cross-functional collaboration

Education

Engineering degree

Computer science degree

CISM/CISA/CISSP/GICSP certifications

Job description

THE POSITION

The Automation & Cyber Security Manager is responsible for ensuring the secure, compliant, and reliable operation of industrial automated control systems within a regulated manufacturing environment. This role combines expertise in operational technology (OT), cyber security, and process automation to support production systems, maintain regulatory compliance, and drive the development of secure and efficient OT/IT integration. The position plays a key role in translating global security standards into local implementation and enabling continuous improvement of systems, processes, and data-driven capabilities.

This is a fixed-term contract until 31st December 2027.

Tasks and Responsibilities

• Ensure Operational Technology (OT) cyber security compliance with relevant regulations and standards, including management of the cyber security management system, risk assessments, controls, and training
• Conduct and maintain security risk assessments, network documentation, and asset registers, and ensure implementation of appropriate countermeasures
• Manage OT systems and equipment throughout their lifecycle, including implementation of cyber security measures, change control, and documentation updates
• Plan and execute automation and IT-related projects, ensuring alignment with system requirements and production needs
• Act as system lead for validation and continuous improvement initiatives related to automation and OT systems
• Ensure system reliability and performance, including obsolescence management and application of functional and safety standards
• Develop and maintain procedures for integration of IT and IACS systems in both GxP and non-GxP environments
• Support development of OT architecture, standards, and governance, and collaborate with global and local stakeholders
• Drive communication and change management within engineering teams to support implementation of cyber security and automation initiatives
• Support deployment and use of business intelligence tools and contribute to processes for data aggregation and reporting

Requirements

• Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443
• Experience with industrial automation systems and OT architecture, including integration with IT systems
• Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511
• Understanding of cyber security risk assessments, controls, and system documentation
• Experience in system lifecycle management, including validation, change control, and documentation practices
• Knowledge of data protection and information protection principles
• Ability to collaborate with multiple stakeholders and work within a matrix organisation
• Degree in engineering, computer science, or a related field, or equivalent experience
• Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred

A Disclosure and Barring Service (DBS) check will be required for the successful candidate. Any offer of employment will be subject to satisfactory DBS certificate.

WHY THIS IS A GREAT PLACE TO WORK

Boehringer Ingelheim has been recognised as a Top Employer in the UK , demonstrating our commitment to building an exceptional workplace through strong people practices and supportive HR policies.

To learn more about why BI is a great place to work, visit:

https://www.boehringer-ingelheim.co.uk/careers/uk-careers/why-great-place-work

All qualified applicants will receive consideration for employment without regard to a person’s actual or perceived race, including natural hairstyles, hair texture and protective hairstyles; color; creed; religion; national origin; age; ancestry; citizenship status, marital status; gender, gender identity or expression; sexual orientation, mental, physical or intellectual disability, veteran status; pregnancy, childbirth or related medical condition; genetic information (including the refusal to submit to genetic testing) or any other class or characteristic protected by applicable law.