Automation & Cyber Security Manager

Boehringer Ingelheim GmbH; United Kingdom; On-site; GBP 70,000 - 110,000; Full time

Job summary

Boehringer Ingelheim GmbH in the United Kingdom seeks an Automation & Cyber Security Manager to secure industrial OT systems within a regulated manufacturing environment. You will translate global security standards into local implementation and advance secure IT/IACS integration across sites.

With experience in OT cyber security, GMP/GxP, and IEC standards, you will lead risk assessments, lifecycle management, and project delivery while collaborating with global and local stakeholders to ensure

Qualifications

• Knowledge of IT/OT cyber security frameworks such as ISO 2700x and IEC 62443.
• Experience with industrial automation and OT architecture and system integration.
• Familiar with GxP (GMP/GAMP5) and IEC 61508/61511 standards.
• Understanding of cyber risk assessments, controls and system documentation.
• Experience in system lifecycle management including validation and change control.
• Knowledge of data protection principles.
• Ability to collaborate in a matrix organisation.
• Degree in engineering, computer science or related field; certifications welcomed (CISM/CISA/CISSP; GICSP preferred).

Responsibilities

• Maintain cyber security compliance for OT and support automation systems on site.
• Perform and document security risk assessments, asset inventories, and controls.
• Manage OT systems lifecycle, including changes and documentation updates.
• Plan and execute automation and IT projects aligning with production needs.
• Lead validation and continuous improvement initiatives for OT systems.
• Ensure system reliability, obsolescence management, and safety/functional compliance.
• Develop IT/IACS integration procedures for GxP and non-GxP environments.
• Support OT architecture, governance, and cross-site collaboration.
• Drive engineering change management and communication within teams.
• Assist data aggregation and reporting processes with BI tools.

Skills

OT cybersecurity

Industrial automation

OT architecture

GxP standards

Cyber risk assessments

Education

Engineering/CS degree or equivalent

Job description

The Automation & Cyber Security Manager is responsible for ensuring the secure, compliant, and reliable operation of industrial automated control systems within a regulated manufacturing environment. This role combines expertise in operational technology (OT), cyber security, and process automation to support production systems, maintain regulatory compliance, and drive the development of secure and efficient OT/IT integration. The position plays a key role in translating global security standards into local implementation and enabling continuous improvement of systems, processes, and data-driven capabilities.

This is a fixed-term contract until 31st December 2027.

Tasks and Responsibilities

The person in this role will be responsible for maintaining cyber security compliance and supporting automation systems across the site. In particular, they will:

• Ensure Operational Technology (OT) cyber security compliance with relevant regulations and standards, including management of the cyber security management system, risk assessments, controls, and training
• Conduct and maintain security risk assessments, network documentation, and asset registers, and ensure implementation of appropriate countermeasures
• Manage OT systems and equipment throughout their lifecycle, including implementation of cyber security measures, change control, and documentation updates
• Plan and execute automation and IT-related projects, ensuring alignment with system requirements and production needs
• Act as system lead for validation and continuous improvement initiatives related to automation and OT systems
• Ensure system reliability and performance, including obsolescence management and application of functional and safety standards
• Develop and maintain procedures for integration of IT and IACS systems in both GxP and non-GxP environments
• Support development of OT architecture, standards, and governance, and collaborate with global and local stakeholders
• Drive communication and change management within engineering teams to support implementation of cyber security and automation initiatives
• Support deployment and use of business intelligence tools and contribute to processes for data aggregation and reporting

Requirements

• Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443
• Experience with industrial automation systems and OT architecture, including integration with IT systems
• Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511
• Understanding of cyber security risk assessments, controls, and system documentation
• Experience in system lifecycle management, including validation, change control, and documentation practices
• Knowledge of data protection and information protection principles
• Ability to collaborate with multiple stakeholders and work within a matrix organisation
• Degree in engineering, computer science, or a related field, or equivalent experience
• Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred

A Disclosure and Barring Service (DBS) check will be required for the successful candidate. Any offer of employment will be subject to satisfactory DBS certificate.

WHY THIS IS A GREAT PLACE TO WORK

Boehringer Ingelheim has been recognised as aTop Employer in the UK, demonstrating our commitment to building an exceptional workplace through strong people practices and supportive HR policies.