Senior Manager of IT Strategy & Security

Our client is in the Biotech industry with $20 million in annual revenue. They are seeking a Senior Manager of IT Strategy & Security. Great opportunity to own the IT Operations & Strategy. The Sr Manager will oversee will be responsible for overall IT Operations, Infrastructure, Cybersecurity Governance, AI Strategy, Vendor Risk Management and Strategic Technology Leadership. Will oversee software, infrastructure, equipment, cybersecurity. Manages application support, server management, cloud and network infrastructure, security best practices.

Reports directly to the President and CEO and manages the Systems Administrator and Senior Software Engineer., * Cybersecurity & Compliance: Govern cybersecurity policies, risk assessments, incident response, disaster recovery, and compliance with SOX IT controls, PCI DSS, ISO 13485, and Technologies security requirements.

• IT Infrastructure & Operations: Oversee networks, servers, cloud environments, telecommunications, desktop and application support, hardware and software assets, licensing, and technology lifecycle planning.
• AI Strategy & Governance: Develop AI roadmap and governance framework, oversee AI tools and vendor assessments, ensure secure integration with NetSuite and enterprise databases, and align AI initiatives with data protection requirements.
• Vendor Risk & Procurement: Lead technology vendor assessments, SaaS evaluations, contract reviews, security monitoring, and coordination with legal and compliance teams.
• Strategic Leadership: Drive multi-year technology initiatives, manage the IT budget and team, identify process improvement opportunities, and report on cybersecurity, AI maturity, and technology risks to executive leadership.

• 5+ years of progressive IT leadership experience, including at least 2 years in strategic IT or cybersecurity.
• Expertise in cybersecurity frameworks such as NIST or ISO 27001 and SOX IT general controls.
• Experience implementing or governing enterprise AI tools, AI data protection, vendor AI risk, and integration architecture.
• Strong knowledge of vendor risk management, SaaS contracts, ERP systems (preferably NetSuite), networks, Microsoft Server environments, virtualization, cloud infrastructure, backup, disaster recovery, and VoIP.
• Experience operating within a corporate parent/subsidiary governance structure.
• CISSP, CISM, CISA, or equivalent certification strongly preferred.

Preferred Qualifications

• Experience in life sciences, pharmaceutical, or regulated manufacturing environments.
• Familiarity with ISO 13485, PCI DSS, enterprise AI governance, AI prompt risk, model governance, and LLM deployment.

Core Competencies

Strategic thinking, executive communication, risk-based decision-making, regulatory compliance, AI innovation, cross-functional collaboration, and high integrity.