Sr. Manager, Infrastructure & Cybersecurity

Job Title: Sr. Manager, Infrastructure & Cybersecurity

Reports To: Director, Infrastructure & Cybersecurity

Employment Type: Full-time

Workplace Type: Hybrid (strong preference for candidates located on the East Coast, specifically the Greater Boston area)

The Celito Team

Celito is a tech-enabled life sciences focused company delivering standardized platforms and accelerators that help biotech organizations streamline operations, reduce risk, and scale from early research through commercialization.

Job Overview

As the Sr. Manager of Infrastructure & Cybersecurity, you will be responsible for overseeing the implementation and maintenance, and organization’s cybersecurity program & Infrastructure (tools, technologies, services, infrastructure) to ensure that information security standards, practices and controls are in place to effectively manage risk to the enterprise and improve the company’s overall security posture. You will help develop strategies for implementing security initiatives and standards. You will be responsible for building a team to execute strategic initiatives for Celito’s customers. In addition, will oversee monitoring, and ensure compliance with regulatory and internal standards including incident response and investigations related to policy violations, security breaches, threats, and attacks. You will be a strategic technical leader, mentoring team members while partnering with other leaders to advance cybersecurity processes across the organization.

Responsibilities and Duties

• Participate in the development of infrastructure and cybersecurity strategic plans and identification of specific initiatives for Celito’s customers and to support the organization's goals and objectives
• Ensure service delivery across client facing IT functions including the day-to-day operations of the organization's technology infrastructure, including servers, storage, networking, and cloud computing
• Oversee the implementation and maintenance of security controls, including firewalls, encryption, and access control systems
• Ensure proper in place strategy for disaster recovery plans to ensure the continued availability of critical systems and data
• Guide clients with regular security assessments and risk assessments to identify potential vulnerabilities and recommend remediation actions
• Stay informed about emerging cybersecurity threats and trends, and recommend appropriate security measures to protect the organization's systems and data
• Support the development and implementation of policies, standards, and procedures related to infrastructure and cybersecurity
• Monitor internal and external policy compliance to ensure that both vendors and employees understand the company’s cybersecurity policies and that they operate within that framework
• Manage a team of infrastructure and cybersecurity professionals and provide mentorship and guidance to support their professional growth
• Establish and maintain security standards that meet or exceed the growing needs of the business
• Develop, implement, and maintain an Incident Response Program including developing IR playbooks
• Work with and actively engage security service providers to deliver necessary services and manage contract requirements and service level agreements
• Serve as lead advisory on cybersecurity matters to ensure appropriate levels of security are integrated in process designs and architecture.
• Develop and implement company-wide/departmental information security training and awareness programs
• Support infrastructure and cybersecurity projects from planning through implementation. Manage scope, timelines, resources, and risks while coordinating teams, vendors, and clients. Ensure delivery within budget, clear progress updates, and a smooth transition to support.
• Performs other duties as assigned.

Qualifications

• 5+ years developing infrastructure & security programs, managing security solutions, and security projects
• 3+ years of experience managing a team of IT professionals
• Expertise with strategic cybersecurity & infrastructure planning and building current/future state road maps
• Conducting security and infrastructure assessments
• Experience working with Security Incident and Event Management (SIEM) tools, endpoint detection and response tools, vulnerability management suites, and various security solutions
• Knowledge of information security frameworks, best practices, and administrative, physical, and technical safeguards (experience with common security frameworks such as NIST & ISO is preferred)
• Strong technical background and knowledge of network and systems security, system and network configuration, and application security
• Experience with incident response management, next gen firewalls, web application firewalls, multi-factor authentication, data loss prevention, disaster recovery
• Excellent organizational, communication and customer service skills with active-listening skills
• Knowledge of regulatory requirements such as California Consumer Privacy Act (CCPA), Sarbanes-Oxley (SOX), and quality guidelines (GxP) is a plus