Senior Manager, IT Operations, Cybersecurity & Compliance

About Cristcot

We are in the business of addressing the problem within the problem. We focus on the details and connections that other, major pharma companies have left ignored for years. There are better ways, better drugs and better formulations and we will make them a reality by analyzing, understanding and solving the problems within the problems.

Job Summary:

Cristcot is seeking a Senior Manager, IT Operations, Cybersecurity & Compliance to lead day-to-day IT operations and maintain a secure, compliant, and reliable technology environment.

This is a hands-on technical leadership role. The successful candidate will personally administer and troubleshoot Microsoft Entra ID, Intune, Defender, SharePoint Online, and related Microsoft 365 services while overseeing Cristcot’s Managed Service Provider and other technology vendors.

The ideal candidate combines strong Microsoft cloud administration expertise with experience in cybersecurity, IT service delivery, vendor management, and regulated environments.

Primary Relationships:

The Senior Manager, IT Operations, Cybersecurity & Compliance will partner closely with internal business leaders and external technology partners to deliver secure, scalable IT services while maintaining compliance with GxP requirements and industry best practices. The successful candidate is an operational leader who drives execution, resolves issues, improves processes, and ensures technology enables the business.

The activities of the Senior Manager, IT Operations, Cybersecurity & Compliance will include, but are not limited to:

M365 Administration

• Administer, configure, and troubleshoot
• • Microsoft Entra ID
  • Microsoft Intune
  • Microsoft Defender
  • SharePoint Online
  • Exchange Online
  • Teams
  • OneDrive
• Manage identity and access controls, including multifactor authentication, Conditional Access, privileged roles, single sign-on, guest access, and user lifecycle management.
• Manage Intune device enrollment, Autopilot, compliance policies, configuration profiles, application deployment, security baselines, and update policies.
• Investigate Microsoft Defender alerts and coordinate security remediation.
• Administer SharePoint sites, permissions, external sharing, governance, and access issues.
• Use PowerShell, Microsoft administrative portals, logs, and audit records to troubleshoot and automate administrative activities.

IT Operations and Service Delivery

• Lead the daily performance, availability, and reliability of corporate IT services.
• Serve as the escalation point for complex Microsoft 365, endpoint, identity, access, and security issues.
• Oversee incident, request, problem, change, and escalation-management processes.
• Monitor service levels, recurring issues, system performance, and user satisfaction.
• Develop and maintain IT procedures, technical documentation, and operational standards.
• Support employee onboarding, offboarding, access changes, and technology lifecycle activities.

Cybersecurity

• Lead operational cybersecurity activities and continuously improve Cristcot’s security posture.
• Oversee endpoint security, vulnerability management, patching, identity security, email protection, and privileged access.
• Maintain cybersecurity risk assessments, remediation plans, and risk registers.
• Coordinate incident response, investigation, recovery, and corrective actions.
• Manage security-awareness and phishing-training programs.
• Support cybersecurity frameworks such as the NIST Cybersecurity Framework and CIS Controls.

Compliance and Business Continuity

• Ensure IT processes and controls support applicable GxP requirements and company quality standards.
• Support regulated change control, computerized system validation, audits, inspections, and evidence collection.
• Develop and maintain IT policies, SOPs, work instructions, and supporting documentation.
• Maintain bu