Director of Infrastructure

About the role

At Rose BioSolutions, our capabilities span foundational research with human immune cells and stem cells to the complete advanced therapy manufacturing continuum. We are an established operation with a world-class team of experts, applying our R.O.S.E standard to every program and relationship: Reliable, Outcome driven, Scalable, and Excellent. This role can be based in Memphis, TN or Rockville, MD and directly owns cybersecurity for the infrastructure organization, in addition to core infrastructure architecture and operations.

As a newly independent company standing up its own IT function post carve-out, we do not yet have an MSP in place: this role will lead the evaluation, selection, and onboarding of our managed services partner(s), which may include a combined MSP/MSSP model or separate providers, then own ongoing SLA management and performance oversight. This is a hands-on leadership role requiring strategic architecture and security ownership alongside direct oversight of vendor selection, vendor delivery, incident response, and infrastructure roadmap execution in a fast-moving, newly standalone life sciences company.

We seek someone with prior carve-out or divestiture experience who has designed and built a future-state IT infrastructure from a legacy or transitional foundation. This person must be comfortable leading a lean team while running a major vendor selection process and communicating infrastructure and security posture clearly to the CIO and executive leadership in a private equity-backed governance context.

Reports to: CIO
Direct reports: 2–5, including on-site support resources across Rose Bio's four locations (Rockville, MD; Memphis, TN; Northridge, CA; Keele, UK)
Travel: Regular travel expected across Rose Bio's four sites in the US and UK; frequency defined by carve-out and MSP/MSSP transition milestones.

Responsibilities

• MSP/MSSP Selection and Vendor Management
  • Lead the RFP, evaluation, and selection process for Rose Bio's first managed service provider(s), determining whether a combined MSP/MSSP model or separate specialized providers best fits security and operational needs, defining scope, SLAs, and success metrics from the ground up.
  • Own the MSP (and MSSP, if part of the same or a related contract) relationship end-to-end post-selection: onboarding, ticket escalations, quarterly business reviews, and ongoing contract and performance management against defined KPIs.
  • Hold the MSP accountable for network, server, storage, help desk, and monitoring service delivery, and the MSSP (whether the same vendor or separate) accountable for security monitoring and response service levels.
  • Clarify and manage the model for on-site support resources at each of the four locations, whether Rose Bio employees, MSP-provided resources, or a mix, as part of the vendor selection and org design process.
  • Manage additional infrastructure vendors as needed.
• Cybersecurity
  • Own cybersecurity strategy, policy, standards, and risk posture for Rose Bio, whether execution is performed in-house or by an MSSP.
  • Architect the security program and determine what is executed internally versus by an MSSP; the Director owns the design and outcomes, the vendor executes against defined scope and SLAs.
  • If an MSSP is engaged (standalone or combined with the MSP), own that relationship end-to-end: scope, SLAs, quarterly performance reviews, and accountability for security monitoring and response service levels.
  • Own incident response decision-making and post-incident review, including working knowledge of SIEM tooling and alerting, even where an MSSP performs detection and triage.
  • Own perimeter security posture, including firewall architecture and configuration, in coordination with the network team and any MSP/MSSP partner.
  • Own identity and access governance, including provisioning, deprovisioning, periodic access reviews, and least-privilege standards.
  • Own data privacy considerations across jurisdictions, including GDPR exposure at the Keele, UK site alongside applicable US requirements.
  • Coordinate with OT security partners to ensure appropriate segmentation and monitoring of manufacturing-adjacent systems.
  • Accountable to the CIO for the organization's overall security posture, regardless of which team or vendor performs day-to-day execution.
• Architecture
  • Own the overall infrastructure architecture strategy across network, server, storage, virtualization, and cloud, ensuring designs support scalability, security, and resilience.
  • Set architectural standards and roadmap for a newly standalone company building its technology environment largely from scratch post carve-out.
  • Make build vs. buy and on-prem vs. cloud architecture decisions in partnership with IT and business leadership.
  • Ensure infrastructure design supports uptime, data integrity, and validation requirements typical of a GxP environment.
• Network, Servers, and Storage
  • Own lifecycle management for network infrastructure (LAN/WAN, firewalls, segmentation), server environments, and storage systems across all sites.
  • Bring hands-on knowledge of firewall architecture, rule management, and perimeter design to guide both internal decisions and vendor oversight.
• Cloud and SaaS
  • Lead infrastructure strategy across Azure and/or AWS, including cost management, security posture, and architecture decisions.
  • Oversee governance of the SaaS portfolio, including Office 365 and other business-critical SaaS platforms.
  • Manage Active Directory (or Azure AD/Entra ID) and identity infrastructure.
• End User Computing and Help Desk
  • Ensure a reliable, well-supported end user computing environment across corporate and site locations.
  • Oversee help desk performance delivered through the MSP, including SLA adherence and end user satisfaction.
• Virtualization and Data Center
  • Own virtualization strategy and platform management (e.g., VMware, Hyper-V).
  • Manage any remaining on-prem data center footprint and its transition roadmap, where applicable.
• Monitoring, Backup, and Disaster Recovery
  • Ensure comprehensive monitoring coverage across infrastructure, with defined alerting and escalation paths.
  • Own disaster recovery and business continuity planning for infrastructure systems, including defined recovery time objectives (RTO) and recovery point objectives (RPO), regular testing, and documentation.
  • Own backup strategy and validation to ensure recoverability meets defined objectives.
  • Maintain infrastructure documentation and runbooks to support audit readiness.
• IT Service Management
  • Own or oversee change management and ITSM processes, including ticketing, change control, and configuration management (CMDB), whether managed in-house or through the MSP.

Requirements

• 10+ years of progressive infrastructure leadership experience, including experience selecting and managing MSPs (not just inheriting an existing relationship).
• Experience in a life sciences, CDMO, pharma, or other regulated manufacturing environment strongly preferred.
• Demonstrated expertise in infrastructure architecture across network, server, storage, virtualization, and cloud (Azure and/or AWS).
• Strong working knowledge of Office 365, Active Directory/Entra ID, and enterprise SaaS management.
• Direct ownership experience of a cybersecurity program, including endpoint, identity, and vulnerability management, not just partnership with a separate security function.
• Hands-on experience with incident management and SIEM tooling, and strong knowledge of perimeter security and firewall architecture.
• Experience with disaster recovery and backup planning, including defining and meeting RTO/RPO targets.
• Experience owning IT service management processes (change management, ticketing, CMDB).
• Prior experience in a carve-out, divestiture, or newly independent company, with a track record of designing and building future-state infrastructure rather than only maintaining an existing environment.
• Experience managing budget for infrastructure and vendor spend.
• Comfort operating in a private equity-backed, board-visible environment, with strong written and verbal communication skills for CIO and executive-level reporting.
• Exposure to OT environments and IT/OT convergence in a manufacturing or lab setting a plus.
• Familiarity with GxP, computer system validation, or 21 CFR Part 11 a plus.
• Familiarity with SOC 2 or similar compliance frameworks a plus.
• Experience with multi-jurisdiction data privacy considerations (e.g., GDPR) a plus given the UK site.
• Bachelor's degree in a related field or equivalent experience; relevant certifications (e.g., Azure/AWS, security) a plus.

What Success Looks Like

• MSP/MSSP performance consistently meets or exceeds SLA targets, with proactive escalation management.
• Infrastructure supports business growth and audit readiness without unplanned downtime.
• Cybersecurity posture across IT and OT environments is continuously improving and measurable.
• Disaster recovery and backup objectives (RTO/RPO) are defined, tested, and met.
• End users and site operations experience reliable, well-supported technology.
• CIO and executive leadership have clear, timely visibility into infrastructure and security posture.

Benefits

• Competitive base salary with performance-based bonus opportunities.
• Comprehensive health, dental, and vision insurance.
• 401(k) with company contribution.
• Generous PTO and professional development support.

Why Join Us?

• Impact: Every process we design is a step toward a cure. You’ll be making a real impact on the health of people in your community and across the globe.
• Expertise: Work alongside a world-class team of scientists and operational leaders in a "no-ego" environment.
• Stability & Growth: We offer the security of an established operation with the career growth opportunities of a rapidly expanding organization.