Director of Enterprise IT

AstraZeneca•Gaithersburg, MD

About The Position

Are you ready to build an AI‑first enterprise technology capability that empowers teams to move faster while staying secure and compliant? Do you thrive in environments where you can set direction in the morning and roll up your sleeves that afternoon to unblock critical work? As Director of Enterprise IT for Evinova, part of the AstraZeneca Group, you will lead the next chapter of our corporate technology landscape. Reporting to the Head of Cybersecurity, you will shape and run a modern, global digital workplace across Microsoft 365, Azure, Salesforce, SAP Cloud and more—balancing bold innovation with the rigor expected in a regulated, patient‑impacting business. You will operate as a player‑coach: defining a multi‑year roadmap, maturing service management, governing partners, and stepping into operational delivery when it matters. You will collaborate closely with leaders across geographies, translating business goals into secure, scalable platforms and exceptional employee experiences. How will you design an AI‑enabled roadmap that improves onboarding speed, first‑contact resolution and end‑user satisfaction—while meeting rigorous assurance? Can you move seamlessly from executive forums to hands‑on incident response and platform administration when the situation demands it?

Requirements

Bachelor's degree in Information Technology, Computer Science, Business Administration, or a related field.
A minimum of 10 years of combined enterprise IT experience, including at least 3 years in a leadership capacity at a global organization.
Demonstrable track record of building or substantially transforming an enterprise IT function in a high-growth, startup-mode, or post spin-out environment.
Hands-on operating preference with a genuine willingness to work tickets, support end users, perform platform administration, and contribute directly to operational delivery.
Deep operational expertise across Microsoft 365 administration and Microsoft Azure for corporate workloads, with hands-on configuration experience.
Direct experience designing or modernizing a corporate device program including procurement, MDM, zero-touch provisioning, and lifecycle management.
Enterprise identity expertise across Microsoft EntraID, conditional access, and integrated identity workflows.
Proven governance of outsourced IT Managed Service Provider relationships through contractual Service Level Agreements, periodic service reviews, and escalation management.
Working knowledge of ITIL v4 service management practices, with demonstrated operational application across incident, problem, change, request, knowledge, and configuration management.
Direct experience supporting external assurance and compliance programs (e.g., ISO 27001, SOC 2, GDPR), including evidence collection, auditor engagement, and remediation of findings.
Excellent written and verbal communication skills with a track record of translating technical decisions into commercial outcomes.
Ability to make pragmatic decisions by analyzing highly complex situations, assessing risks, and balancing strategic and tactical compliance / quality requirements.
Ability to work independently in a fast-paced environment with a proven ability to manage competing priorities.

Nice To Haves

Master's degree in information technology, business administration, or a similar relevant area of study.
At least one of the following professional certifications: ITIL v4 (Foundation or above), Project Management Professional (PMP), Certified Information Systems Security Professional (CISSP), and / or Microsoft Certified: Enterprise Administrator Expert.
Prior experience in Enterprise IT at a SaaS / cloud service provider or healthtech organization.
Hands-on experience deploying AI-assisted IT operations capabilities including AI-powered ticket triage, knowledge base augmentation, automated end-user support, and intelligent workflow automation.
Experience in ensuring compliance within a highly regulated sophisticated global business environment, particularly in the healthcare and / or clinical research industry.
A global perspective on privacy, security, and data protection issues and trends.
Demonstrate initiative, strong customer orientation, and cross-cultural working across US, European, and Asia-Pacific business contexts.
Endpoint management expertise (Jamf and Apple Business Manager preferred but not required).

Responsibilities

Define and sequence a multi‑year, AI‑first enterprise IT strategy aligned to business growth, regulatory commitments, and cybersecurity direction—prioritizing automation, intelligent workflows, and AI‑assisted end‑user support to amplify productivity and reduce risk.
Own end‑to‑end delivery of the enterprise technology stack (Microsoft 365, Azure, Salesforce Sales/Marketing/Service Clouds, SAP Cloud, collaboration tools), ensuring platform innovation, license optimization, and tight alignment with evolving business needs.
Design and operate a modern endpoint estate—device procurement, MDM and protection, zero‑touch provisioning, application packaging, lifecycle and asset management—with integrated workflows that improve reliability and speed to productivity.
Govern the outsourced IT Managed Service Provider via SLAs, QBRs, escalation pathways and renewals—driving measurable gains in service quality, cost, and end‑user satisfaction.
Manage relationships with key enterprise vendors and AstraZeneca Group service owners, aligning to group policies and leveraging shared capabilities to accelerate delivery and resilience.
Establish and continuously improve ITIL v4 practices across incident, problem, change, request, knowledge and configuration management—selecting and refining the ITSM platform to enable consistency, transparency and speed.
Lead from the front by working tickets during backlogs, directly supporting users when required, and performing platform administration—setting the standard for operational excellence and accountability.
Maintain an authoritative CMDB and asset inventory with accurate ownership, classification and risk attribution in partnership with Cybersecurity Engineering.
Partner with Cybersecurity Assurance to support external programs (e.g., ISO 27001:2022, SOC 2 Type 2, China MLPS, customer audits), including evidence collection in HyperProof, auditor engagement, and timely remediation.
Serve as the corporate IT extension in incident response, bringing domain expertise across Microsoft, Salesforce, identity, and endpoints to contain and recover quickly.
Build, develop and retain a globally distributed team covering identity, endpoint security configuration, business systems analysis and IT operations—fostering a culture of learning, service and delivery.
Present roadmaps, risk posture, service performance and investment proposals to senior leaders, linking technology decisions to commercial and patient outcomes.
Drive telemetry‑ and feedback‑driven improvements to onboarding lead times, ticket resolution, first‑contact resolution and satisfaction scores—making the employee technology experience a measurable competitive advantage.