Automation & Cyber Security Specialist

Boehringer Ingelheim GmbH; Aberdeen City, Pirbright; On-site; GBP 70,000 - 95,000; Full time

Job summary

Böehringer Ingelheim is seeking an Automation & Cyber Security Manager to ensure secure, compliant operation of industrial control systems in a regulated manufacturing environment. The role combines OT, cyber security and process automation to support production, regulatory compliance and IT/OT integration.

It is a fixed-term contract until 31 December 2027. The candidate will maintain cyber security compliance, conduct risk assessments, manage OT lifecycle, plan automation projects, lead

Qualifications

• Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443.
• Experience with industrial automation systems and OT architecture, including integration with IT systems.
• Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511.
• Understanding of cyber security risk assessments, controls, and system documentation.
• Experience in system lifecycle management, including validation, change control, and documentation practices.
• Knowledge of data protection and information protection principles.
• Ability to collaborate with multiple stakeholders and work within a matrix organisation.
• Degree in engineering, computer science, or a related field, or equivalent experience.
• Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred.

Responsibilities

• Maintain cyber security compliance and support automation systems across the site.
• Ensure OT cyber security compliance with regulations and standards, including management of the cyber security management system, risk assessments, controls, and training.
• Conduct and maintain security risk assessments, network documentation, and asset registers, and implement countermeasures.
• Manage OT systems and equipment lifecycle, including cyber security measures, change control, and documentation updates.
• Plan and execute automation and IT-related projects aligned with system requirements and production needs.
• Act as system lead for validation and continuous improvement initiatives related to automation and OT systems.
• Ensure system reliability and performance, including obsolescence management and adherence to functional and safety standards.
• Develop and maintain IT and IACS integration procedures for GxP and non-GxP environments.
• Support OT architecture, standards and governance; collaborate with global and local stakeholders.
• Drive communication and change management within engineering teams for cyber security and automation initiatives.
• Support deployment and use of BI tools and data aggregation/reporting processes.

Skills

OT cyber security

Industrial automation

Regulatory compliance

Stakeholder collaboration

Change management

Risk assessment

Documentation practices

Analytical thinking

Education

Engineering/CS degree or equivalent experience

Tools

IT/OT integration tools

Cyber security frameworks (ISO 2700x, IEC 62443)

Job description

The Automation & Cyber Security Manager is responsible for ensuring the secure, compliant, and reliable operation of industrial automated control systems within a regulated manufacturing environment. This role combines expertise in operational technology (OT), cyber security, and process automation to support production systems, maintain regulatory compliance, and drive the development of secure and efficient OT/IT integration. The position plays a key role in translating global security standards into local implementation and enabling continuous improvement of systems, processes, and data-driven capabilities.

This is a fixed-term contract until 31st December 2027.

Tasks and Responsibilities

The person in this role will be responsible for maintaining cyber security compliance and supporting automation systems across the site. In particular, they will:

• Ensure Operational Technology (OT) cyber security compliance with relevant regulations and standards, including management of the cyber security management system, risk assessments, controls, and training
• Conduct and maintain security risk assessments, network documentation, and asset registers, and ensure implementation of appropriate countermeasures
• Manage OT systems and equipment throughout their lifecycle, including implementation of cyber security measures, change control, and documentation updates
• Plan and execute automation and IT-related projects, ensuring alignment with system requirements and production needs
• Act as system lead for validation and continuous improvement initiatives related to automation and OT systems
• Ensure system reliability and performance, including obsolescence management and application of functional and safety standards
• Develop and maintain procedures for integration of IT and IACS systems in both GxP and non-GxP environments
• Support development of OT architecture, standards, and governance, and collaborate with global and local stakeholders
• Drive communication and change management within engineering teams to support implementation of cyber security and automation initiatives
• Support deployment and use of business intelligence tools and contribute to processes for data aggregation and reporting

Requirements

• Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443
• Experience with industrial automation systems and OT architecture, including integration with IT systems
• Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511
• Understanding of cyber security risk assessments, controls, and system documentation
• Experience in system lifecycle management, including validation, change control, and documentation practices
• Knowledge of data protection and information protection principles
• Ability to collaborate with multiple stakeholders and work within a matrix organisation
• Degree in engineering, computer science, or a related field, or equivalent experience
• Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred

A Disclosure and Barring Service (DBS) check will be required for the successful candidate. Any offer of employment will be subject to satisfactory DBS certificate.

WHY THIS IS A GREAT PLACE TO WORK

Boehringer Ingelheim has been recognised as aTop Employer in the UK, demonstrating our commitment to building an exceptional workplace through strong people practices and supportive HR policies.