Platform Information Security Officer (PISO), Life Sciences Platform

Job description

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact — innovating at the speed of life. Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we're committed to hiring and developing from within. You'll thrive in a culture of belonging where you and your unique viewpoint matter. Learn about the Danaher Business System which makes everything possible. About the Life Sciences Platform The Life Sciences Platform is one of Danaher's three global platforms and comprises a portfolio of leading operating companies serving the biopharma R&D, genomic medicine, and bioproduction ecosystem — Abcam (research antibodies and reagents), Aldevron (nucleic acid and protein CDMO for gene and cell therapies, gene editing, and DNA/RNA vaccines), Genedata (enterprise software for biopharma R&D digitalization), IDBS (BioPharma lifecycle data management software), IDT (custom oligonucleotides and genomic solutions), Pall Corporation (filtration, separation, and purification technologies), Phenomenex (chromatography), and Sciex (mass spectrometry). The platform operates globally, with headquarters, R&D centers, GxP-regulated manufacturing sites, and software delivery centers across North America, Europe, and Asia — including major footprints in the United States, United Kingdom, Germany, Switzerland, and Singapore. OpCo customers include the world's leading pharmaceutical, biotech, and academic research institutions, resulting in a heavy concentration of GxP (GLP/GMP/GCP) obligations, 21 CFR Part 11 requirements, EU Annex 11, customer intellectual property, and pharma-grade quality expectations. The platform includes a mix of instrument, consumable, reagent, CDMO, and software businesses — each with its own security profile. The Platform Information Security Officer (PISO), Life Sciences Platform is responsible for end-to-end cybersecurity execution across all operating companies (OpCos) within the Life Sciences Platform globally. As part of Danaher's global information security operating model — six central DIS Global Services pillars and identically structured DIS Platform Security Teams under each platform — this leader is the platform's senior-most cybersecurity executive and the operational counterpart to the Global CISO across a global conglomerate of OpCos and their sites in North America, Europe, and Asia. The PISO enforces enterprise cyber standards across the Life Sciences OpCos, drives continuous improvement, and adapts the global program to the unique security needs of each OpCo's mix of instruments, consumables, reagents, CDMO manufacturing, and enterprise software — including GxP-regulated environments, 21 CFR Part 11 compliance, protection of customer molecules and research IP, and secure operation of SaaS platforms serving pharma customers. This position reports to the Chief Information Security Officer (CISO) and is part of the Global Information Security organization, located in Washington, D.C. and will be a remote/hybrid role, with regular international travel required to Life Sciences OpCo headquarters, R&D centers, CDMO facilities, and manufacturing sites across North America, Europe, and Asia. In this role, you will have the opportunity to: Own end-to-end cybersecurity execution across all Life Sciences OpCos globally, translating Danaher's global cyber strategy, policies, and standards into measurable outcomes while serving as the platform's senior cybersecurity executive and single accountable face of cyber to OpCo Presidents, CIOs, R&D/product leaders, manufacturing site leaders, the CISO, and OpCo executive leadership. Build, lead, and develop a globally distributed Platform Security Team spanning Security Architecture & Engineering, Technical Security Risk Management, Cyber Assurance Management, Data & AI Security, Cyber PMO, and Manufacturing Security, partnering in a matrixed model with the six DIS Global Services pillars to align platform execution to enterprise standards and central capabilities. Own the Life Sciences Platform's cyber risk register, technical risk management, vulnerability management prioritization, remediation delivery, architecture review execution, integration and remediation engineering, and platform architecture standards that embed enterprise controls into OpCo enterprise systems, cloud environments, and connected medical device platforms. Lead platform cyber assurance, including customer security questionnaires, audit response, ISO 27001, HITRUST, SOC 2, PCI DSS, and other cybersecurity certification programs, serving as the single face to hospital, health system, and government-agency assessors. Coordinate with the central Product Security function on FDA premarket cybersecurity, postmarket vulnerability management, SBOM, and PSIRT operations for Diagnostics OpCos' connected medical devices and IVD instruments, including requirements under Section 524B of the FD&C Act and other applicable regulatory expectations. Drive cyber diligence, integration, and day-1 through steady-state onboarding when Life Sciences OpCos acquire new business units, while leading data protection, AI security governance coordination, application security engineering, secrets management, and MFA coordination across OpCo applications and clinical data estates in alignment with HIPAA, GDPR, China PIPL, and other applicable data protection regimes. Secure the platform's OT and manufacturing plant environments across global manufacturing sites in coordination with the central OT/manufacturing security function, including plant engagement, site-level operations, and OT segmentation using IEC 62443 or NIST 800-82; run the platform cyber PMO across multiple time zones, including cadence, RAG reporting, resource loading, initiative execution, KPI/posture reporting, and application of the Danaher Business System to drive continuous improvement, standard work, and problem solving. The essential requirements of the job include: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience; 12+ years of information security experience, including direct ownership of a cybersecurity function serving multiple business units, sites, or operating companies within a global organization. Demonstrated experience as a CISO, Deputy CISO, Business Unit or Divisional CISO, or equivalent senior cyber leader accountable for an end-to-end program spanning security architecture, risk management, assurance, application/data security, and coordination with SOC and incident response. Experience owning cybersecurity certification and audit programs (ISO 27001, SOC 2, HITRUST, or equivalent) and leading pharma-customer security questionnaire and third-party assurance response at scale. Experience with GxP-regulated environments, 21 CFR Part 11, EU Annex 11, and computer system validation as they intersect with cybersecurity controls. Experience leading an information security function through multiple layers of management across globally distributed teams and time zones. Experience operating in a decentralized, multi-business-unit environment — influencing without direct authority, balancing enterprise standards with operating-company autonomy, and driving execution through matrixed relationships. Experience with cyber diligence and post-close integration for mergers and acquisitions; experience running a cybersecurity program across multiple countries and data-protection regimes (GDPR, HIPAA, China PIPL, or equivalent). Travel, Motor Vehicle Record & Physical/Environment Requirements: Ability to travel 25 - 30% of the time, including in