IT Security and Systems Administrator

Aruna Bio, Inc. is an Athens, GA clinical-stage biotechnology company developing a new class of cell-free biologics, a therapeutic exosome for Neurovascular, Neurotrauma, and Neurodegenerative indications.

The IT Security and Systems Administrator provides technical support; administers network, storage, cloud, and application systems; manages IT inventory; and ensures data and physical security. This is a hands-on, one-person IT function in a small, regulated company. The role also strengthens our IT infrastructure and cybersecurity posture, supports computerized-system compliance, and leads process-improvement projects, protecting our intellectual property, clinical data, and GxP records.

This is a rare chance to build upon a developing IT and security program while supporting therapies for some of the hardest CNS diseases.

• Serve as primary administrator for all company systems, with documented backup and emergency access.
• Administer Microsoft 365 and Entra  (identities, licensing, Exchange, SharePoint, Teams, One Drive).
• Manage Windows laptop, lab, and mobile endpoints physically, through remote desktop, and through Microsoft Intune, including deployment and patching.
• Maintain wired and wireless networks (firewalls, switches, Wi-Fi, VPN), with segmented corporate, lab, and guest networks.
• Manage backup, disaster recovery, and business continuity; test restores regularly.
• Grant and remove access during onboarding, offboarding and role changes.
• Purchase, install, repair, and upgrade PC hardware, peripherals, and software.
• Maintain IT asset inventory, including assignment, licenses, and warranties.
• Deploy new applications and build low-code solutions and automated workflows with Microsoft Power Platform.
• Manage the help desk and support users in person, by phone, by email, and remotely.
• Troubleshoot applications and systems; escalation major issues to vendors.
• Train users on hardware, software, and cybersecurity awareness, including phishing simulations.
• Conduct risk assessments and implement administrative, technical, and physical controls.
• Maintain the information security program, policies, and procedures, aligned with government guidance (NIST CSF or similar).
• Enforce MFA, least-privilege access, encryption, and secure configuration baselines.
• Manage EDR (e.g., Microsoft Defender), email security, and log monitoring; lead incident response.
• Run vulnerability scans and remediation;
  Monitor emerging threats and update defenses.
• Protect intellectual property and confidential data, including data shared with partners, using data loss prevention and granular access control.
• Support research security and compliance requirements for federal funding.
• Support computerized system validation (CSV/CSA) with Quality, including IQ/OQ/PQ.
• Ensure systems meet 21 CFR Part 11 and other regulatory requirements for audit trails, e-signatures, access, and record retention.
• Apply ALCOA+ data-integrity principles to lab, manufacturing, and clinical data.
• Maintain IT SOPs, change control, and access reviews; support audits and inspections.
• Support networked lab computers, including specialized instruments and software.
• Support QMS, material inventory system, and cleanroom environmental monitoring systems.
• Coordinate physical security systems, including badge access, cameras, and alarms.
• Assess technology needs with users and management and recommend improvements.
• Deploy infrastructure, applications, and workflows that support business processes.
• Recommend IT and cybersecurity goals, policies, and procedures to senior leadership.
• Manage the IT budget and technology roadmap.
• Manage vendors directly, including evaluations, contracts, and renewals.
• Assess third-party security, including but not limited to clinical-trial systems (EDC, eTMF).

• Bachelor's degree in computer science, information technology, or a related field and 2+ years of relevant work experience; or
• Associate's degree in information technology or a related field and 4+ years of relevant work experience; or
• 5+ years of equivalent work experience with multiple relevant industry certifications.

• Experience with Microsoft Intune, Defender, and other advanced Microsoft 365 tools.
• App development experience within Microsoft Power Platform (Power Apps, Power Automate, SharePoint integration).
• Experience in an FDA-regulated environment (biotech, pharma, or medical device).
• Knowledge of pharmaceutical regulatory frameworks for computerized system validation,…