The Automation & Cyber Security Manager is responsible for ensuring the secure, compliant, and reliable operation of industrial automated control systems within a regulated manufacturing environment. This role combines expertise in operational technology (OT), cyber security, and process automation to support production systems, maintain regulatory compliance, and drive the development of secure and efficient OT/IT integration. The position plays a key role in translating global security standards into local implementation and enabling continuous improvement of systems, processes, and data-driven capabilities.
This is a fixed-term contract until 31st December 2027.
The person in this role will be responsible for maintaining cyber security compliance and supporting automation systems across the site. In particular, they will:
- Ensure Operational Technology (OT) cyber security compliance with relevant regulations and standards, including management of the cyber security management system, risk assessments, controls, and training
- Conduct and maintain security risk assessments, network documentation, and asset registers, and ensure implementation of appropriate countermeasures
- Manage OT systems and equipment throughout their lifecycle, including implementation of cyber security measures, change control, and documentation updates
- Plan and execute automation and IT-related projects, ensuring alignment with system requirements and production needs
- Act as system lead for validation and continuous improvement initiatives related to automation and OT systems
- Ensure system reliability and performance, including obsolescence management and application of functional and safety standards
- Develop and maintain procedures for integration of IT and IACS systems in both GxP and non-GxP environments
- Support development of OT architecture, standards, and governance, and collaborate with global and local stakeholders
- Drive communication and change management within engineering teams to support implementation of cyber security and automation initiatives
Support deployment and use of business intelligence tools and contribute to processes for data aggregation and reporting
-
- Knowledge of IT and/or OT cyber security, including frameworks such as ISO 2700x and IEC 62443
- Experience with industrial automation systems and OT architecture, including integration with IT systems
- Familiarity with regulated environments and standards such as GxP (including GMP and GAMP5) and IEC 61508/61511
- Understanding of cyber security risk assessments, controls, and system documentation
- Experience in system lifecycle management, including validation, change control, and documentation practices
- Knowledge of data protection and information protection principles
- Ability to collaborate with multiple stakeholders and work within a matrix organisation
- Degree in engineering, computer science, or a related field, or equivalent experience
Additional cyber security certifications (e.g. CISM, CISA, CISSP or similar) are considered an advantage; GICSP (Global Industrial Cyber Security Professional) is preferred
-
A Disclosure and Barring Service (DBS) check will be required for the successful candidate. Any offer of employment will be subject to satisfactory DBS certificate.
Boehringer Ingelheim has been recognised as a Top Employer in the UK , demonstrating our commitment to building an exceptional workplace through strong people practices and supportive HR policies.
To learn more about why BI is a great place to work, visit:
https://www.boehringer-ingelheim.co.uk/careers/uk-careers/why-great-place-work
