Sr. Manager, Infrastructure & Cybersecurity

Job Title: Sr. Manager, Infrastructure & Cybersecurity
Reports To: Director, Infrastructure & Cybersecurity
Employment Type: Full-time
Workplace Type: Hybrid (strong preference for candidates located on the East Coast, specifically the Greater Boston area)
The Celito Team
Celito is a tech-enabled life sciences focused company delivering standardized platforms and accelerators that help biotech organizations streamline operations, reduce risk, and scale from early research through commercialization.
Job Overview
As the Sr. Manager of Infrastructure & Cybersecurity, you will be responsible for overseeing the implementation and maintenance, and organization’s cybersecurity program & Infrastructure (tools, technologies, services, infrastructure) to ensure that information security standards, practices and controls are in place to effectively manage risk to the enterprise and improve the company’s overall security posture. You will help develop strategies for implementing security initiatives and standards. You will be responsible for building a team to execute strategic initiatives for Celito’s customers. In addition, will oversee monitoring, and ensure compliance with regulatory and internal standards including incident response and investigations related to policy violations, security breaches, threats, and attacks. You will be a strategic technical leader, mentoring team members while partnering with other leaders to advance cybersecurity processes across the organization.
Responsibilities and Duties
Participate in the development of infrastructure and cybersecurity strategic plans and identification of specific initiatives for Celito’s customers and to support the organization's goals and objectives
Ensure service delivery across client facing IT functions including the day-to-day operations of the organization's technology infrastructure, including servers, storage, networking, and cloud computing
Oversee the implementation and maintenance of security controls, including firewalls, encryption, and access control systems
Ensure proper in place strategy for disaster recovery plans to ensure the continued availability of critical systems and data
Guide clients with regular security assessments and risk assessments to identify potential vulnerabilities and recommend remediation actions
Stay informed about emerging cybersecurity threats and trends, and recommend appropriate security measures to protect the organization's systems and data
Support the development and implementation of policies, standards, and procedures related to infrastructure and cybersecurity
Monitor internal and external policy compliance to ensure that both vendors and employees understand the company’s cybersecurity policies and that they operate within that framework
Manage a team of infrastructure and cybersecurity professionals and provide mentorship and guidance to support their professional growth
Establish and maintain security standards that meet or exceed the growing needs of the business
Develop, implement, and maintain an Incident Response Program including developing IR playbooks
Work with and actively engage security service providers to deliver necessary services and manage contract requirements and service level agreements
Serve as lead advisory on cybersecurity matters to ensure appropriate levels of security are integrated in process designs and architecture.
Develop and implement company-wide/departmental information security training and awareness programs
Support infrastructure and cybersecurity projects from planning through implementation. Manage scope, timelines, resources, and risks while coordinating teams, vendors, and clients. Ensure delivery within budget, clear progress updates, and a smooth transition to support.
Performs other duties as assigned.
Qualifications
5+ years developing infrastructure & security programs, managing security solutions, and security projects
3+ years of experience managing a team of IT professionals
Expertise with strategic cybersecurity & infrastructure planning and building current/future state road maps
Conducting security and infrastructure assessments
Experience working with Security Incident and Event Management (SIEM) tools, endpoint detection and response tools, vulnerability management suites, and various security solutions
Knowledge of information security frameworks, best practices, and administrative, physical, and technical safeguards (experience with common security frameworks such as NIST & ISO is preferred)
Strong technical background and knowledge of network and systems security, system and network configuration, and application security
Experience with incident response management, next gen firewalls, web application firewalls, multi-factor authentication, data loss prevention, disaster recovery
Excellent organizational, communication and customer service skills with active-listening skills
Knowledge of regulatory requirements such as California Consumer Privacy Act (CCPA), Sarbanes-Oxley (SOX), and quality guidelines (GxP) is a plus

Work arrangement
Yes