Associate Director, IT Infrastructure & Cyber Security in Stevenage

Work with Autolus – a leading company in cancer therapy and autoimmune disease research, we offer a flexible, diverse, and dynamic working environment that promotes creativity, leadership, and teamwork.

Reports to: Executive Director, IT Operations

Department: Corporate

Hours: Monday – Friday 0900/1700 (35 hours per week)

Locations: Stevenage or London (Mediaworks)

Role Summary: The Associate Director of IT Infrastructure & Cyber Security leads the design, delivery, and continuous improvement of the organisation's IT Infrastructure and Cyber Security capabilities, providing strategic direction and hands‑on leadership across infrastructure services, cloud platforms, cyber security, governance, risk and compliance, and technology transformation. The role supports senior stakeholders, maintains high‑performing technology services, strengthens cyber resilience, and enables the organisation’s operational and strategic priorities through effective technology leadership.

Key Responsibilities

• Strategic Leadership
  • Develop and implement the enterprise IT Infrastructure and Cyber Security strategy aligned to business objectives.
  • Define technology roadmaps, translating strategic goals into prioritised and deliverable initiatives.
  • Provide strategic leadership for infrastructure modernisation, cloud adoption, automation, resilience and emerging technologies.
  • Act as a trusted advisor to Executive Leadership on technology investments, cyber risks and enterprise architecture.
• Infrastructure & Technology Services
  • Own the architecture, implementation and operational management of enterprise infrastructure services.
  • Ensure infrastructure platforms are secure, resilient, highly available, scalable and fit for future business requirements.
  • Oversee cloud platforms, networking, datacentre technologies, storage, end‑user computing, collaboration platforms, identity management and infrastructure monitoring.
  • Drive standardisation, automation and continual service improvement.
• Cyber Security
  • Define and maintain the Cyber Security strategy, governance framework and operating model.
  • Ensure compliance with recognised security frameworks including ISO27001, NIST Cyber Security Framework and IEC62443.
  • Lead security architecture, Security Operations Centre (SOC), vulnerability management, incident response and cyber resilience activities.
  • Conduct technology and cyber risk assessments, developing mitigation plans and providing executive reporting.
  • Lead business continuity and disaster recovery planning.
  • Champion security‑by‑design principles and promote a security‑first culture across the organisation.
• Governance & Service Delivery
  • Establish governance, operational policies, standards and procedures across Infrastructure and Cyber Security.
  • Ensure compliance with applicable legal, regulatory and industry requirements.
  • Define and monitor KPIs, SLAs and service performance metrics.
  • Drive continual service improvement and operational excellence.
• Financial & Vendor Management
  • Own the Infrastructure and Cyber Security budgets, ensuring effective resource allocation and cost optimisation.
  • Lead supplier selection, contract negotiation and vendor performance management.
  • Develop strategic partnerships with technology vendors and managed service providers.
• Leadership & Transformation
  • Build, lead, mentor and develop high‑performing Infrastructure and Cyber Security teams.
  • Foster a culture of collaboration, accountability, innovation and continuous improvement.
  • Lead enterprise infrastructure upgrades, cloud migrations and technology transformation programmes.
  • Ensure projects are delivered within agreed scope, budget and timelines.

Experience Requirements – Demonstrated Skills & Competencies

• Essential – Minimum 10 years’ experience in enterprise IT Infrastructure and Technology Operations with at least 5 years in a senior leadership role.
• Essential – Proven experience developing and implementing enterprise Infrastructure and Cyber Security strategies.
• Essential – Demonstrated experience managing enterprise infrastructure including cloud, networking, datacentres, storage, end‑user computing and cyber security technologies.
• Essential – Experience leading Security Operations, incident response, vulnerability management, technology transformation and cloud migration programmes.
• Essential – Experience managing technology budgets, strategic suppliers, managed service providers and vendor contracts.
• Essential – Strong knowledge of enterprise infrastructure architecture, cloud computing, cyber security, IT Service Management, business continuity and disaster recovery.
• Essential – Knowledge of ISO27001, NIST Cyber Security Framework, IEC62443 and relevant regulatory requirements including GDPR and GxP.
• Essential – Experience working within regulated pharmaceutical, biotechnology or healthcare environments.
• Preferred – Professional certifications such as ITIL, CISSP, CISM, CCSP, ISO27001 Lead Implementer/Auditor, TOGAF or cloud platform certifications (Azure, AWS or Google Cloud).
• Preferred – Excellent leadership, stakeholder management, communication, commercial, analytical and decision‑making skills with the ability to balance strategic planning and operational delivery.

Qualifications

• Essential – Bachelor’s degree in Information Technology, Computer Science, Cyber Security, Engineering or a related discipline.
• Essential – Postgraduate qualification (e.g. MSc or MBA) or equivalent professional qualification.

Autolus is committed to providing an inclusive and fair workplace for all. We are an equal‑opportunity employer and do not discriminate on the basis of race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status or any other legally protected characteristic. Reasonable accommodations are provided throughout the recruitment process.

We offer a competitive salary, performance‑related bonus, private medical insurance, life assurance and pension.