IT Infrastructure & Security Manager

Job Description : Manager, IT Infrastructure & Security

Department: Group Technology

Reporting to: Group Chief Technology Officer

Employment: Full-time

Location: Malta, with travel between Group sites as required

Role Purpose

The Manager, IT Infrastructure & Security is responsible for ensuring that the Group’s technology infrastructure is secure, reliable, resilient and properly governed.

This is a hands-on management role that translates the Group Technology Strategy into practical technical controls and improvements. The role will manage infrastructure, cloud services, cybersecurity, identity, networks, endpoints, backup and disaster recovery across the Group.

The role will also provide internal technical ownership and oversight of the Group’s managed service provider and specialist technology suppliers. External providers will continue to deliver agreed operational and specialist services, but responsibility for technical governance, standards, assurance and accountability will remain internally controlled.

Key Responsibilities

1. Infrastructure and Cloud Management

• Manage and maintain the Group’s server, cloud, network and core technology infrastructure.
• Lead the transition from on-premises infrastructure towards a cloud-first, Microsoft-supported architecture.
• Manage Microsoft Azure services, Windows Server environments, virtualisation and related infrastructure.
• Support the migration of file services to SharePoint and OneDrive and suitable workloads to Azure or SaaS platforms.
• Ensure infrastructure is appropriately configured, monitored, patched, documented and supported.
• Review infrastructure capacity, performance, availability and lifecycle requirements.
• Maintain secure administrative access and ensure that the Group retains ownership of all systems, configurations and credentials.

2. Microsoft 365, Identity and Endpoint Management

• Administer and govern Microsoft 365, Entra ID, Intune and related Microsoft security services.
• Implement and maintain Conditional Access, multifactor authentication and role-based access controls.
• Manage privileged access, separate administrative accounts and emergency access arrangements.
• Lead the enrolment and management of corporate endpoints through Intune.
• Implement and monitor BitLocker, device compliance, security baselines and patch-management requirements.
• Review user access and administrative permissions regularly and ensure prompt access removal during offboarding.

3. Cybersecurity and Governance

• Implement the Group’s cybersecurity roadmap, policies, standards and technical security controls.
• Monitor the Group’s security posture, Microsoft Secure Score and agreed remediation programme.
• Oversee Microsoft Defender, email security, endpoint protection and other security platforms.
• Identify vulnerabilities, security gaps and control weaknesses and coordinate their remediation.
• Maintain technical security policies, standards, procedures and operating runbooks.
• Support risk assessments, internal audits, external audits, tender requirements and regulatory compliance.
• Work with the Group Quality, Data Protection, Legal and Risk functions on technology-related risks and controls.
• Promote security awareness and secure working practices throughout the Group.

4. Network and Connectivity

• Govern the Group’s LAN, WAN, Wi-Fi, internet connectivity, VPNs, firewalls, switches and routers.
• Maintain appropriate VLAN segmentation, secure remote access and network- access controls.
• Oversee the Group’s UniFi environment, wireless controllers, access points and corporate wireless standards.
• Manage dual-ISP resilience and automatic failover arrangements at critical sites.
• Ensure network configurations, addressing, diagrams and administrative access are properly documented.
• Coordinate network upgrades, cabling projects, office expansions and site migrations.

5. Resilience, Backup and Disaster Recovery

• Ensure that all critical systems, Microsoft 365 services and business data are included in approved backup arrangements.
• Monitor backup success and ensure failures are investigated and resolved.
• Coordinate periodic restore tests and retain evidence that critical data can be recovered.
• Develop and maintain disaster-recovery and technology continuity plans.
• Define and monitor appropriate recovery time and recovery point objectives.
• Coordinate infrastructure failover and recovery exercises with internal stakeholders and service providers.
• Identify single points of failure and recommend proportionate resilience improvements.

6. Security Incident Management

• Act as the internal technical lead for cybersecurity and major infrastructure incidents.
• Assess security alerts and coordinate containment, investigation, recovery and escalation.
• Work with the MSP, security specialists and management during significant incidents.
• Maintain accurate incident records, timelines, decisions and supporting evidence.
• Conduct or coordinate post-incident reviews and ensure that corrective actions are completed.
• Escalate material risks and incidents promptly to the Group CTO.

7. Supplier and Service Management

• Manage the technical performance of the Group’s MSP and specialist infrastructure and security suppliers.
• Define technical requirements, service expectations, responsibilities and escalation arrangements.
• Review supplier reports, service levels, security findings and proposed technical changes.
• Challenge recommendations where these do not align with the approved architecture, roadmap or security standards.
• Validate project scope, technical design, deliverables and completion evidence.
• Ensure effective knowledge transfer and prevent inappropriate dependency on individual suppliers.
• Assist the Group CTO with quotations, technical evaluations, contract reviews and technology procurement.

8. Documentation, Assets and Change Control

• Maintain an accurate technology asset and configuration register.
• Ensure that network diagrams, system configurations, licences, warranties and support arrangements are documented.
• Establish and maintain technical standards for devices, servers, networks and cloud services.
• Apply appropriate change-management controls to significant infrastructure and security changes.
• Ensure that privileged credentials and recovery information are securely controlled and available to the Group.
• Produce regular infrastructure, security, incident, capacity and compliance reports for the Group CTO.

9. Team and Stakeholder Support

• Provide technical leadership and guidance to the IT Support & Systems Administrator.
•  Act as the escalation point for complex infrastructure, Microsoft 365, network and security issues.
• Work closely with the Business Solutions Manager on dependencies between business applications and infrastructure.
• Coordinate with business leaders to understand operational requirements and minimise disruption.
• Support the development of the internal technology function through standards, documentation, coaching and knowledge sharing.

Role Boundaries

• The Group CTO retains accountability for technology strategy, investment priorities, policies, budgets and executive reporting.
• The Manager IT Infrastructure & Security owns technical infrastructure and security management, implementation oversight and operational assurance.
• The MSP and specialist suppliers continue to provide contracted monitoring, field support, project delivery and specialist escalation services.

Required Experience

• At least five years’ relevant experience in infrastructure, cloud, systems administration or cybersecurity.
• Demonstrable experience in a senior infrastructure, security or technical-lead position.
• Strong practical experience with Microsoft 365, Azure, Entra ID, Intune and Microsoft Defender.
• Experience managing Windows Server, Active Directory, virtualisation and hybrid-cloud environments.
• Good knowledge of networking, firewalls, VLANs, VPNs, Wi-Fi and resilient internet connectivity.
• Experience with endpoint management, encryption, patching and security configuration.
• Experience with backup, restoration, disaster recovery and business-continuity testing.
• Experience coordinating managed service providers and specialist technology suppliers.
• Experience investigating or coordinating security and major infrastructure incidents.
• Ability to prepare technical documentation, risk assessments, management reports and implementation plans.

Qualifications

• Degree or recognised professional qualification in information technology, cybersecurity, computer science or a related discipline; or equivalent relevant professional experience.
• Relevant Microsoft, infrastructure or cybersecurity certifications would be advantageous, including Azure Administrator, Azure Security Engineer, Identity and Access Administrator, CISSP or CISM.
• Knowledge of recognised security and service-management frameworks, such as
• ISO 27001, NIST Cybersecurity Framework, CIS Controls or ITIL, would be beneficial.

Personal Attributes

•  Strong sense of ownership, integrity and accountability.
•  Practical and hands-on while capable of operating at management level.
•  Able to challenge suppliers constructively and make evidence-based recommendations.
•  Organised, methodical and attentive to security and operational detail.
•  Calm and decisive when managing incidents or service disruption.
•  Able to explain technical risks and recommendations in clear business language.
•  Comfortable working across different companies, locations and operational environments.
•  Collaborative, service-oriented and committed to continuous improvement.