Vice President, Information Security – Manufacturing Plant Security, Product Security, Application Security

This is a fully remote position, open to applicants in United States.

📋 Description

• Drive the global strategy and implementation for manufacturing plant (OT/ICS) security across Danaher’s 14+ operating companies in over 50 countries.

• Oversee the product security strategy for IoT-enabled and connected digital health products, ensuring compliance with FDA medical device cybersecurity regulations.

• Spearhead the application security strategy within engineering teams, focusing on CI/CD pipeline security, DevSecOps best practices, and governance for AI-enhanced development tools like Claude Code.

• Assemble and manage a team of functional leaders and embedded security experts across operating companies worldwide.

• Collaborate with operating company presidents, plant managers, and product and engineering leaders to integrate security into business operations.

• Develop and uphold a unified risk management framework for manufacturing, product, and application security, complete with metrics and executive reporting.

• Advocate for Danaher’s security strategy and risk posture to the executive leadership and, when necessary, to audit and risk committees.

• Report directly to the Chief Information Security Officer (CISO).

• Travel frequently to Danaher operating company and manufacturing sites globally.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related discipline, or equivalent professional experience.

• More than 12 years of information security experience, including direct responsibility for manufacturing plant (OT/ICS) security, product security, or application security within a global organization.

• Familiarity with FDA medical device cybersecurity requirements, including premarket cybersecurity submissions under Section 524B of the FD&C Act and post-market vulnerability management.

• Proficient in applying OT/ICS security frameworks such as IEC 62443 or NIST 800-82 within manufacturing or industrial settings.

• Knowledge of modern application security tools and practices, encompassing CI/CD pipeline security, SAST/DAST/SCA, and cloud-native application security.

• Proven experience leading an information security function through various management layers in global, multi-site organizations.

• Experience operating within a multi-country organization spanning 50 or more nations.

• Willingness to travel domestically and internationally, up to 30% of the time.

• Prior experience in a diversified, multi-business-unit organization with a decentralized business model.

• Professional certifications such as CISSP, CISM, or GICSP are preferred.

• Experience presenting to boards, audit committees, or executive risk committees.

🏝️ Benefits

• Eligibility for bonus/incentive pay.

• Paid time off.

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k).