Platform Information Security Officer (PISO), Life Sciences Platform

This position reports to the Chief Information Security Officer (CISO) and is part of the Global Information Security organization, located in Washington, D.C. and will be a remote/hybrid role, with regular international travel required to Life Sciences OpCo headquarters, R&D centers, CDMO facilities, and manufacturing sites across North America, Europe, and Asia.

In this role, you will have the opportunity to:

• Own end-to-end cybersecurity execution across all Life Sciences OpCos globally, translating Danaher's global cyber strategy, policies, and standards into measurable outcomes while serving as the platform's senior cybersecurity executive and single accountable face of cyber to OpCo Presidents, CIOs, R&D/product leaders, manufacturing site leaders, the CISO, and OpCo executive leadership.
• Build, lead, and develop a globally distributed Platform Security Team spanning Security Architecture & Engineering, Technical Security Risk Management, Cyber Assurance Management, Data & AI Security, Cyber PMO, and Manufacturing Security, partnering in a matrixed model with the six DIS Global Services pillars to align platform execution to enterprise standards and central capabilities.
• Own the Life Sciences Platform's cyber risk register, technical risk management, vulnerability management prioritization, remediation delivery, architecture review execution, integration and remediation engineering, and platform architecture standards that embed enterprise controls into OpCo enterprise systems, cloud environments, and connected medical device platforms.
• Lead platform cyber assurance, including customer security questionnaires, audit response, ISO 27001, HITRUST, SOC 2, PCI DSS, and other cybersecurity certification programs, serving as the single face to hospital, health system, and government-agency assessors.
• Coordinate with the central Product Security function on FDA premarket cybersecurity, postmarket vulnerability management, SBOM, and PSIRT operations for Diagnostics OpCos' connected medical devices and IVD instruments, including requirements under Section 524B of the FD&C Act and other applicable regulatory expectations.
• Drive cyber diligence, integration, and day-1 through steady-state onboarding when Life Sciences OpCos acquire new business units, while leading data protection, AI security governance coordination, application security engineering, secrets management, and MFA coordination across OpCo applications and clinical data estates in alignment with HIPAA, GDPR, China PIPL, and other applicable data protection regimes.
• Secure the platform's OT and manufacturing plant environments across global manufacturing sites in coordination with the central OT/manufacturing security function, including plant engagement, site-level operations, and OT segmentation using IEC 62443 or NIST 800-82; run the platform cyber PMO across multiple time zones, including cadence, RAG reporting, resource loading, initiative execution, KPI/posture reporting, and application of the Danaher Business System to drive continuous improvement, standard work, and problem solving.

The essential requirements of the job include:

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience
• 12+ years of information security experience, including direct ownership of a cybersecurity function serving multiple business units, sites, or operating companies within a global organization
• Demonstrated experience as a CISO, Deputy CISO, Business Unit or Divisional CISO, or equivalent senior cyber leader accountable for an end-to-end program spanning security architecture, risk management, assurance, application/data security, and coordination with SOC and incident response
• Experience owning cybersecurity certification and audit programs (ISO 27001, SOC 2, HITRUST, or equivalent) and leading pharma-customer security questionnaire and third-party assurance response at scale
• Experience with GxP-regulated environments, 21 CFR Part 11, EU Annex 11, and computer system validation as they intersect with cybersecurity controls
• Experience leading an information security function through multiple layers of management across globally distributed teams and time zones
• Experience operating in a decentralized, multi-business-unit environment — influencing without direct authority, balancing enterprise standards with operating-company autonomy, and driving execution through matrixed relationships
• Experience with cyber diligence and post-close integration for mergers and acquisitions; experience running a cybersecurity program across multiple countries and data-protection regimes (GDPR, HIPAA, China PIPL, or equivalent)

Travel, Motor Vehicle Record & Physical/Environment Requirements:

Ability to travel 25 - 30% of the time, including international travel to Life Sciences operating company headquarters, R&D centers, CDMO facilities, and manufacturing sites in North America, Europe, and Asia.

It would be a plus if you also possess previous experience in:

• Cybersecurity leadership within biopharma, life sciences reagents/instruments, CDMO / GMP contract manufacturing, or SaaS software serving pharma customers
• Deep experience securing SaaS product platforms delivered to pharma customers, including SOC 2 Type II, ISO 27001, HIPAA, and pharma-customer data protection expectations
• OT/ICS and manufacturing plant security experience in GMP-regulated pharma manufacturing or CDMO environments (IEC 62443, NIST 800-82, ISPE GAMP 5)
• Experience protecting research intellectual property, customer molecules, and trade secrets, including insider risk management in high-IP environments