- Posted on
Job description
Inceptua is a global pharmaceutical services company with market-leading capabilities across multiple business areas. We have over 25 years of experience serving life science companies of various sizes and global operations with offices across Europe, North America, and Asia.
We provide clinical trial supply, services and logistics, including comparator sourcing of medicines, packaging, labelling, storage, and distribution services. Â And we offer strategic advice, design, facilitation, and implementation of global early access programs, and distributes unlicensed and other medicines worldwide.
Our success is based on the motivation, dedication and performance of our people. We strive to go the extra mile and achieve excellence in all our services.Â
We are hiring for the newly created position of IT Infrastructure & Security Manager, based in our office in Berlin, Germany or Windsor, UK.
You will report to our VP, Global IT, and join a global IT team operating across three continents.
Responsibilities include, but are not limited to:
- Define and own our IT infrastructure and security strategy covering cloud, network, endpoints, and identity, and translate that into standards the team can actually work to.
- Govern our cloud infrastructure across providers (primarily Azure, with GCP, AWS, and StackIT in use or planned): resource architecture, cost governance, patching standards, and lifecycle management.
- Own our network infrastructure: WAN design, office connectivity, VPN architecture, and segmentation across a three-continent footprint with an eye on both performance and security.
- Set endpoint management standards: Autopilot/Intune deployment profiles, application packaging policy, and endpoint compliance configuration – the team delivers, but the standard is yours.
- Own our identity and access architecture: Entra ID, Privileged Identity Management, Conditional Access, and the rules governing what external partners are and aren’t permitted to access.
- Maintain an IT risk register that is actually used, not a once-a-year exercise. Translate findings into clear language for senior management and, where relevant, for sponsor audits.
- Develop and maintain IT security policies and SOPs with a good understanding of what GxP, Annex 11, and GAMP5 mean for IT infrastructure in a pharma environment.
- Partner with Data Protection and Quality teams to ensure privacy and compliance by design across our systems and clinical trial data handling.
- Own IT asset and licence management policy: hardware lifecycle, software licence inventory, contract renewal, and infrastructure budget oversight (OPEX/CAPEX).
- Lead incident response when things go wrong: containment, recovery, root cause, and reporting, including regulatory and executive communication.
- Run or commission penetration tests and security assessments; track remediation to completion.
- Own our Business Continuity and Disaster Recovery planning and make sure restore tests actually happen.
- Drive the organisation’s security awareness culture: training, practical communications, and constructive course corrections when things slip.
- Play a key role in building out your new team, assisting with the interviewing, hiring, and scaling of the engineers you will lead.
Your profile:
- You have 6+ years in IT infrastructure, security, or a role that genuinely covered both, not one with a dash of the other.
- You have led or mentored a small technical team before, not as a people manager by title, but as someone engineers actually look to for direction.
- You know Microsoft’s security stack well: Entra ID, Defender, Conditional Access, and PIM well enough to review what the team has configured and know whether it’s right.
- You are comfortable with Azure as an infrastructure platform, not just a security tool: VM administration, networking, resource governance, and cost management. Experience with GCP, AWS, or StackIT is a plus.
- You understand network fundamentals at a level where you can make architecture decisions: routing, segmentation, VPN, and firewall policy.
- You have worked in a regulated environment before – pharma, life sciences, medtech, or similar. Familiarity with Annex 11 or GAMP5 is a real advantage; the ability to get there quickly is the minimum.
- You know what good looks like in an IT vendor contract from a security perspective: access controls, audit rights, change documentation, and you’ve actually had to enforce it.
- You can write a risk finding that a CFO will read and understand, and a technical spec that an engineer can implement. Both matter in this role.
- A recognised certification (CISM, CISSP, or equivalent) is preferred, or evidence you’re working toward one.
- You’ve operated in an international environment and are used to working across time zones, cultures, and organisational layers. Fluent business English is required.
- You are a low-ego collaborator who finds satisfaction in the team’s overall security and stability, and you are comfortable making unpopular calls when the situation requires it.
This position is full-time with a hybrid schedule (three fixed days per week in the office, two days remote).
Our company is home to employees from diverse backgrounds who speak a range of languages. With teams across different locations and cultures, we value diversity and believe that inclusive collaboration makes us stronger.
If you have a forward-thinking attitude and are ready to go the extra mile with us, we look forward to receiving your application.