IT Manager – Engineering, Manufacturing & Cyber Security

Job Board

Companies

LORILLION

IT Manager – Engineering, Manufacturing & Cyber Security

Full-Time On-site

Apply Now

Details

Role Purpose:
The IT Manager will be responsible for developing, implementing, managing and continuously improving the company's IT infrastructure, systems, cyber security, information management and technical support capability within a growing engineering consultancy and advanced manufacturing business. The company develops and manufactures battery packs, electronics and charging systems for the electrification of transport across the marine, industrial, automotive and defence sectors. Products include 60V–800V battery systems using cylindrical and pouch cells, electronics and charging solutions ranging from motorcycles through to large marine vessels, supporting prototype development through to low/niche-volume production of 50–5,000 units per year per product. The IT Manager will ensure that the company's IT environment is secure, reliable, scalable and appropriate for a technically demanding engineering and manufacturing organisation. This includes responsibility for corporate IT, engineering systems, Microsoft 365, cloud services, networks, hardware, software licensing, cyber security, data protection, backup and disaster recovery, user support and IT supplier management. A key responsibility will be establishing and maintaining appropriate cyber and information security controls, including Cyber Essentials / Cyber Essentials Plus, while supporting the company's ISO 9001, ISO 14001 and ISO 45001 management systems and meeting the enhanced information-security expectations associated with automotive, marine and defence customers. The role will work closely with Engineering, Manufacturing, Operations, Quality, Commercial, Programme Management and our IT services provider to ensure IT systems support the organisation from engineering concept through prototype manufacture, testing and production.

Key Responsibilities:
IT Strategy, Governance & Infrastructure

Develop and implement the the company's IT strategy and technology roadmap in alignment with business growth plans.
Establish an IT infrastructure capable of scaling with the organisation as headcount, engineering projects and manufacturing operations increase.
Develop and maintain IT policies, procedures, standards and work instructions.
Manage corporate IT infrastructure including: Servers and cloud services, Networks, Wi-Fi and internet connectivity, Firewalls and VPNs, PCs, laptops and engineering workstations, Printers and peripherals, and meeting-room and collaboration technology
Establish appropriate segregation between corporate, engineering, laboratory and manufacturing networks where required.
Manage IT asset inventories, lifecycle replacement plans and equipment disposal.
Develop annual IT budgets and technology investment plans.

Cyber Security & Information Security

Take operational responsibility for the company's cyber-security framework and controls.
Establish and maintain compliance with Cyber Essentials and Cyber Essentials Plus.
Maintain cyber-security policies covering: Access control, Password and authentication requirements, Multi-factor authentication, Privileged accounts, Endpoint security, Patch management, Malware protection, Remote working, and data classification and handling
Manage appropriate network security, monitoring and threat-protection controls.
Manage vulnerability identification, remediation and periodic security testing.
Coordinate response to cyber-security incidents.
Maintain cyber-security incident response and recovery procedures.
Conduct or coordinate cyber-security awareness training and phishing-awareness activities.
Support customer security assessments and cyber-security questionnaires.
Support implementation of additional information-security controls where required by automotive, marine or defence customers.

Microsoft 365, Cloud & Collaboration Systems

Administer and optimise Microsoft 365 services including: Entra ID / Azure Active Directory, Exchange Online, SharePoint, Teams, OneDrive etc
Manage user accounts, groups, permissions and role-based access controls.
Manage appropriate data-retention, sharing and access-control policies.
Ensure company and customer information is stored in appropriate controlled locations.
Support development of SharePoint-based document management and collaboration systems.
Ensure leavers, starters and role changes are managed through controlled IT processes.

Engineering IT Systems

Support specialist engineering software and computing environments used for: CAD / CAE, Electrical design, PCB design, Simulation, Software application development, Embedded systems development, Data acquisition and analysis, Requirements management and Project management
Manage engineering software licensing and licence-server infrastructure.
Ensure engineering workstations are appropriately specified and maintained.
Work with engineering teams to define secure environments for customer projects.
Support version control, source-code repositories and engineering data-management.
Support Product Lifecycle Management (PLM), Product Data Management (PDM) and configuration-management solutions where implemented.
Ensure customer-specific information and intellectual property are appropriately protected.

Manufacturing & Operational IT

Support IT systems required for prototype and production manufacturing.
Support implementation and maintenance of systems including ERP/MRP, Manufacturing traceability, Barcode/QR-code systems, Manufacturing documentation, Quality records, Test data, Calibration records and Inventory and stock-management systems
Work with Manufacturing and Quality teams to establish secure collection and retention of manufacturing and end-of-line test data.
Ensure production-critical IT systems have appropriate, backup and recovery arrangements.
Support secure connectivity of manufacturing equipment, test systems and industrial devices while managing cyber-security risks.

IT Support & Service Management

Ensure coordinate responsive IT support across the organisation.
Ensure appropriate helpdesk, incident and service-request processes.
Establish Service Level Agreements (SLAs) with external vendors and service providers
Diagnose and resolve hardware, software, network and user-access issues.
Maintain standard configurations for laptops, workstations and other company devices.
Manage employee onboarding and offboarding from an IT perspective.
Develop IT service-level expectations and monitor performance.
Maintain IT documentation including system architecture, configurations, licences and administrative procedures.

Data Protection & Information Management

Support company compliance with UK GDPR and the Data Protection Act 2018.
Implement appropriate technical controls for protection of personal, company and customer information.
Support development of data-retention and secure-deletion policies.
Ensure appropriate access permissions are maintained for sensitive information.
Support data-protection impact assessments where appropriate.
Work with Quality and Operations to ensure electronic records meet applicable document-control and retention requirements.

Backup, Disaster Recovery & Business Continuity

Develop and maintain company backup and disaster-recovery arrangements.
Define appropriate Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for critical systems.
Ensure backups are appropriately protected from cyber threats, including ransomware.
Conduct periodic recovery tests.
Maintain IT disaster-recovery procedures.
Support company Business Continuity Planning and risk-management activities.
Identify single points of failure and implement appropriate mitigation.

ISO & Management System Support

Support the company's Integrated Management System, including: ISO 9001 – Quality Management, ISO 14001 – Environmental Management and ISO 45001 – Occupational Health & Safety
Ensure electronic document and record-management systems support controlled documentation requirements.
Participate in internal and external audits where IT systems or information security are within scope.
Maintain appropriate IT records and evidence of compliance.
Support corrective actions arising from IT or information-security audits.

IT Supplier & Commercial Management

Select and manage IT service providers, software vendors, cloud providers and specialist cyber-security suppliers.
Negotiate software licensing and IT support agreements.
Monitor supplier performance, service levels and costs.
Ensure appropriate security and confidentiality requirements are incorporated into supplier arrangements.
Maintain software and licence inventories.
Identify opportunities to reduce IT costs without compromising security, resilience or operational capability.

Risk Management & Compliance

Maintain an IT and cyber-security risk register.
Conduct periodic IT risk assessments, identify risks and developing mitigation plans.
Support compliance with customer-specific security requirements.
Work with senior management to ensure significant IT and cyber risks are understood and appropriately managed.

Continuous Improvement & Technology Development

Identify new technologies that could improve engineering productivity, manufacturing efficiency and business operations.
Develop opportunities for automation and digitalisation of business processes.
Support implementation of workflow automation, dashboards and management-information systems.
Set company IT support strategy for AI, working with the Executive team to define the future roadmap. This must include a comprehensive plan to secure training data and control LLM interaction with external sources.
Evaluate appropriate use of AI tools, including agentic AI while maintaining confidentiality, intellectual-property and customer-security requirements.
Develop an IT environment capable of supporting continued company growth without unnecessary complexity or bureaucracy.

Qualifications, Experience and Skills Required:

Degree, HNC/HND or equivalent professional experience in Information Technology, Computer Science, Cyber Security, Information Systems or a related discipline.
Minimum 5–8 years' relevant IT experience, including responsibility for IT systems within an engineering, technology or manufacturing organisation.
Experience administering Microsoft 365 environments.
Strong knowledge of networking, firewalls, VPNs, Wi-Fi and endpoint management.
Good understanding of Windows-based enterprise environments.
Practical knowledge of cyber-security principles and controls.
Experience managing user identities, permissions and role-based access.
Experience implementing backup and disaster-recovery solutions.
Understanding of cloud-based IT services and infrastructure.
Experience managing IT suppliers, software licences and support contracts.
Strong troubleshooting and problem-solving capability.
Ability to communicate technical issues clearly to non-technical users and senior management.
Strong documentation and organisational skills.
Ability to manage multiple priorities within a rapidly growing organisation.

Qualifications, Experience and Skills Preferred:

Experience within an engineering consultancy, automotive, battery, marine, aerospace, defence or advanced manufacturing organisation.
Experience implementing or maintaining Cyber Essentials / Cyber Essentials Plus.
Experience with ISO 27001 principles or an Information Security Management System (ISMS).
Microsoft technical certifications or equivalent.
Cyber-security qualifications such as CISSP, CISM, CompTIA Security+, SSCP or equivalent.
Experience with Microsoft Azure, Entra ID and Intune.
Experience with SharePoint administration and document-management solutions.
Experience supporting CAD/CAE and specialist engineering applications.
Familiarity with engineering PDM/PLM systems.
Experience with ERP/MRP or Manufacturing Execution Systems (MES).
Knowledge of software-development environments, Git/source control and DevOps systems.
Experience supporting secure customer or defence-related projects.
Familiarity with UK defence-sector cyber-security and information-handling requirements.
Knowledge of the NIST Cybersecurity Framework or similar risk-based cyber-security frameworks.
Experience implementing IT infrastructure within a start-up or rapidly scaling technology business.

Role specific knowledge:

Microsoft 365, Azure/Entra ID, SharePoint, Teams and endpoint management.
Corporate and engineering IT infrastructure.
Network architecture and cyber security.
Identity and access management.
Multi-factor authentication and privileged-access management.
Endpoint security and device management.
Cyber Essentials and Cyber Essentials Plus.
Information-security risk management.
Backup, disaster recovery and business continuity.
UK GDPR and data-protection requirements.
Engineering software and licence management.
CAD/CAE/PDM/PLM environments.
ERP/MRP and manufacturing IT systems.
Manufacturing traceability and production data management.
Configuration management and engineering change control.
Electronic document and record control.
ISO 9001 information and document-control requirements.
Cloud computing and Software-as-a-Service environments.
IT asset and software licence management.
Cyber incident management and recovery.
Protection of customer confidential information and intellectual property.
IT supplier and third-party security management.
Digitalisation and business-process automation.

Personal Attributes:

Hands-on and pragmatic – comfortable moving between strategic IT planning and resolving day-to-day technical issues.
Security conscious – naturally considers cyber security, confidentiality and information protection when implementing systems.
Service oriented – understands that IT exists to enable engineering, manufacturing and wider business operations.
Commercially aware – balances functionality, security, resilience and cost when selecting solutions.
Highly organised with strong attention to detail.
Proactive and solutions focused, identifying problems before they affect operations.
Adaptable and comfortable with ambiguity, particularly within a rapidly developing start-up environment.
Strong communicator, capable of explaining complex technical and cyber-security issues in clear business terms.
Collaborative, able to work effectively with Engineering, Manufacturing, Quality, Operations, Commercial and senior leadership teams.
Calm and methodical under pressure, particularly during system outages or cyber-security incidents.
High level of integrity and discretion when handling commercially sensitive, customer-confidential and personal information.
Continuous improvement mindset, seeking practical opportunities to simplify and automate processes.
Self-motivated and accountable, with the ability to establish systems and processes from first principles.
Enthusiastic about advanced engineering, electrification, manufacturing and the application of technology to enable business growth.

Location and Travel:

You must be eligible to work in the UK and have no restrictions for world-wide travel and will be required to support our Prague office in the Czech Republic
This role is based at our Head Office in the UK (Coventry), with flexibility for remote working up to 2 days a week.
Working hours are 0900 to 1700, 5 days a week, however some travel is expected, and flexible working patterns are essential to the role.