IT Director

Job Summary

The IT Director is the global functional leader accountable for defining and executing OrbusNeich’s information technology strategy, operating model and multi-year roadmap. The role will align technology investment with business priorities; provide secure, resilient and scalable platforms; strengthen enterprise applications, data and cybersecurity capabilities; and ensure that technology controls support a regulated medical device business.

Operating as both a strategic adviser and a hands-on transformation leader, the incumbent will partner with senior management and regional/function leaders to simplify processes, improve decision-making and enable sustainable global growth. The role owns global IT service delivery, enterprise architecture, applications, infrastructure, cybersecurity, governance, vendors, budgets and the development of the IT team.

Key Responsibilities

1. Global IT Strategy and Business Partnership

• Develop and execute a global IT strategy and multi-year roadmap aligned with OrbusNeich’s business strategy, growth plans and risk appetite.
• Serve as a trusted adviser to senior management and functional leaders, translating business priorities into scalable technology capabilities and measurable outcomes.
• Establish demand, portfolio and investment governance; prioritise initiatives based on strategic value, risk, regulatory impact, total cost and delivery capacity.
• Define the global IT operating model, decision rights, standards, policies and service catalogue while balancing global consistency with legitimate local requirements.
• Provide regular executive reporting on roadmap delivery, service performance, cybersecurity exposure, risk, budget and benefits realisation.

2. Enterprise Applications, Data and Digital Transformation

• Own the strategy, lifecycle and integration of core enterprise platforms supporting finance, manufacturing, quality, supply chain, commercial, HR and other corporate functions, including ERP and related systems.
• Partner with process owners to standardise and digitise end-to-end workflows, reduce manual effort and strengthen data quality, traceability and controls.
• Establish enterprise architecture, integration and master-data principles that support a reliable single source of truth across regions and functions.
• Advance reporting, analytics, automation and responsible AI capabilities with appropriate governance, security, validation and change management.
• Lead system selection, implementation, enhancement and retirement, ensuring clear business ownership, adoption, benefits tracking and sustainable support.

3. Infrastructure, Cloud and Global Service Delivery

• Ensure secure, resilient and cost-effective global infrastructure, networks, cloud services, collaboration platforms, end-user computing and workplace technologies.
• Set service-management standards and performance measures for incidents, requests, problems, changes, assets, configuration and knowledge management.
• Improve service quality and user experience across offices, manufacturing sites and remote teams through clear service levels, monitoring and continual improvement.
• Maintain tested business continuity, disaster recovery, backup and crisis-response capabilities for critical technology services.
• Manage technology lifecycle, capacity, technical debt and obsolescence risks through disciplined architecture and investment planning.

4. Cybersecurity, Privacy and Technology Risk

• Own the enterprise cybersecurity and technology risk programme, including security strategy, policies, architecture, identity and access management, vulnerability management, monitoring, incident response and third-party risk.
• Implement risk-based controls aligned with recognised frameworks and applicable laws, contractual obligations and data-privacy requirements across operating regions.
• Brief senior management on material risks and incidents, coordinate response and remediation, and promote a strong security culture through awareness and role-based training.
• Partner with R&D, Quality and Regulatory Affairs on interfaces between enterprise IT and connected products, product cybersecurity or regulated digital solutions, with clear accountability between functions.
• Support internal and external audits, customer assessments, due diligence and regulatory inspections relating to technology controls.

5. Quality, Regulatory and Compliance Enablement

• Ensure relevant systems and records meet applicable quality-system, data-integrity, electronic-record and electronic-signature requirements, working closely with Quality and Regulatory Affairs.
• Establish proportionate computer software assurance / computer system validation governance across the system lifecycle, including requirements, testing, change control, access, audit trails, backup and retirement.
• Maintain inspection-ready technology documentation and evidence, and ensure identified control gaps are remediated promptly and sustainably.
• Embed compliance, privacy and security by design into technology projects and vendor arrangements.

6. Leadership, Financial and Vendor Management

• Build, lead and develop a high-performing global IT team with clear accountabilities, succession plans and capabilities suited to the future roadmap.
• Own the global IT budget, forecasts, resource plan and cost optimisation while maintaining service resilience and control effectiveness.
• Manage strategic suppliers, managed-service partners, software licensing and contracts; establish service levels, performance reviews, risk controls and commercial discipline.
• Lead major programmes with strong governance over scope, schedule, cost, quality, risk, dependencies, adoption and benefits.
• Drive effective organisational change, stakeholder engagement, communications and training to maximise adoption of new processes and technologies.

Qualifications & Experience

• Bachelor’s degree in Information Technology, Computer Science, Engineering, Business Information Systems or a related discipline; a relevant master’s degree or MBA is advantageous.
• Typically 15+ years of progressive IT experience, including at least 7 years in senior leadership roles with accountability for multiple IT domains, teams, budgets and strategic vendors.
• Demonstrated success leading a global or multi-region IT function and delivering enterprise-wide transformation in a regulated, manufacturing-led environment.
• Medical device, life sciences, pharmaceutical or similarly regulated industry experience is strongly preferred.
• Proven experience with enterprise applications and ERP transformation; exposure to manufacturing, quality, supply chain and finance processes is essential.
• Strong record in cybersecurity, technology risk, infrastructure/cloud, service delivery, business continuity and third-party governance.
• Experience supporting validated or regulated systems and applying risk-based lifecycle controls; familiarity with GxP, data integrity, electronic records/signatures and relevant medical device quality expectations is preferred.
• Experience leading cross-border teams and vendors across different cultures, time zones and regulatory environments.
• Enterprise architecture, ERP and business applications, integration, data and analytics, cloud and infrastructure, IT service management, cybersecurity and technology risk.
• Relevant frameworks and practices such as ITIL, COBIT, NIST Cybersecurity Framework and ISO/IEC 27001; certifications are advantageous but not mandatory.
• Programme and portfolio governance, agile and traditional delivery methods, financial management, sourcing and vendor management.
• Working knowledge of privacy and records obligations across key operating regions, including GDPR and other applicable local requirements.
• Fluent written and spoken English, Cantonese and Mandarin
• Willingness to travel internationally as business needs require.