Platform Information Security Officer (PISO), Diagnostics Platform
About the Diagnostics Platform
The Diagnostics Platform is one of Danaher's three global platforms, uniting a portfolio of leading operating companies whose work sits at the point of clinical decision — from the emergency room and intensive care unit to the pathology lab, the core hospital laboratory, the molecular diagnostics workstation, and the patient bedside. The technologies developed and delivered by these operating companies help clinicians detect cancer earlier, identify and manage infectious diseases ranging from tuberculosis and HIV to sepsis and respiratory infections, monitor critically ill and vulnerable patients continuously, and make faster, more confident decisions when time and accuracy save lives.
The platform has a global presence, with operating companies serving hospitals, clinical laboratories, and point-of-care settings on six continents. Its products are highly regulated connected medical devices and in vitro diagnostics (IVD) directly involved in acute-care and life-critical clinical decisions — making cybersecurity a patient-safety, regulatory, and brand-trust priority for the platform.
The Platform Information Security Officer (PISO), Diagnostics Platform is responsible for end-to-end cybersecurity execution across all operating companies (OpCos) within the Diagnostics Platform globally. As part of Danaher's global information security operating model — six central DIS Global Services pillars and identically structured DIS Platform Security Teams under each platform — this leader is the platform's senior-most cybersecurity executive and the operational counterpart to the Global CISO across a global conglomerate of OpCos.
The PISO enforces enterprise cyber standards across the Diagnostics OpCos, drives continuous improvement, and adapts the global program to the unique security needs of each OpCo's connected medical devices, clinical customers, regulatory obligations (including FDA premarket and postmarket medical device cybersecurity, EU IVDR, and IEC 81001-5-1 / IEC 62443), and manufacturing footprint.
This position reports to the Chief Information Security Officer (CISO) and is part of the Global Information Security organization, located in Washington, D.C. and will be a remote role, with regular global travel required to Diagnostics OpCo sites.
In this role, you will have the opportunity to:
Own end-to-end cybersecurity execution across all Diagnostics OpCos globally, translating Danaher's global cyber strategy, policies, and standards into measurable outcomes while serving as the platform's senior cybersecurity executive and single accountable face of cyber to OpCo Presidents, CIOs, R&D/product leaders, manufacturing site leaders, the CISO, and OpCo executive leadership.
Build, lead, and develop a globally distributed Platform Security Team spanning Security Architecture & Engineering, Technical Security Risk Management, Cyber Assurance Management, Data & AI Security, Cyber PMO, and Manufacturing Security, partnering in a matrixed model with the six DIS Global Services pillars to align platform execution to enterprise standards and central capabilities.
Own the Diagnostics Platform's cyber risk register, technical risk management, vulnerability management prioritization, remediation delivery, architecture review execution, integration and remediation engineering, and platform architecture standards that embed enterprise controls into OpCo enterprise systems, cloud environments, and connected medical device platforms.
Lead platform cyber assurance, including customer security questionnaires, audit response, ISO 27001, HITRUST, SOC 2, PCI DSS, and other cybersecurity certification programs, serving as the single face to hospital, health system, and government-agency assessors.
Coordinate with the central Product Security function on FDA premarket cybersecurity, postmarket vulnerability management, SBOM, and PSIRT operations for Diagnostics OpCos' connected medical devices and IVD instruments, including requirements under Section 524B of the FD&C Act and other applicable regulatory expectations.
Drive cyber diligence, integration, and day-1 through steady-state onboarding when Diagnostics OpCos acquire new business units, while leading data protection, AI security governance coordination, application security engineering, secrets management, and MFA coordination across OpCo applications and clinical data estates in alignment with HIPAA, GDPR, China PIPL, and other applicable data protection regimes.
Secure the platform's OT and manufacturing plant environments across global manufacturing sites in coordination with the central OT/manufacturing security function, including plant engagement, site-level operations, and OT segmentation using IEC 62443 or NIST 800-82; run the platform cyber PMO across multiple time zones, including cadence, RAG reporting, resource loading, initiative execution, KPI/posture reporting, and application of the Danaher Business System to drive continuous improvement, standard work, and problem solving.
The essential requirements of the job include:
Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience, with 12+ years of information security experience including direct ownership of a cybersecurity function serving multiple business units, sites, or operating companies within a global organization.
Demonstrated experience as a CISO, Deputy CISO, Business Unit or Divisional CISO, or equivalent senior cyber leader accountable for an end-to-end program spanning security architecture, risk management, assurance, application/data security, and coordination with SOC and incident response.
Experience leading an information security function through multiple layers of management across globally distributed teams and time zones.
Experience operating in a decentralized, multi-business-unit environment, including influencing without direct authority, balancing enterprise standards with operating-company autonomy, and driving execution through matrixed relationships.
Experience owning cybersecurity certification and audit programs, including ISO 27001, HITRUST, SOC 2, PCI DSS, or equivalent, and leading customer security questionnaire and third-party assurance response at scale.
Experience partnering on product security for connected medical devices, IVD instruments, or other regulated hardware, including FDA premarket and postmarket medical device cybersecurity requirements, as well as running a cybersecurity program across multiple countries and data-protection regimes such as HIPAA, GDPR, China PIPL, or equivalent.
Experience with cyber diligence and post-close integration for mergers and acquisitions.
Travel, Motor Vehicle Record & Physical/Environment Requirements:
It would be a plus if you also possess previous experience in:
Cybersecurity leadership within medical devices, IVD, diagnostics, life sciences, or an equivalent regulated, patient-facing industry.
Deep familiarity with FDA Section 524B, IEC 81001-5-1, IEC 62443-4-1/4-2, and EU IVDR / MDR cybersecurity expectations.
AI security governance, including secure use of AI-assisted development tools, LLM application security, and data governance for AI workloads that touch clinical or patient data.
#LI-KW4
Danaher offers a broad array of comprehensive, competitive benefit programs that add value to our lives. Whether it's a health care program or paid time off, our programs contribute to life beyond the job. Check out our benefits at .
The annual salary range for this role is $225,000-$275,000. This is the range that we in good faith believe is the range of possible compensation for this role at the time of this posting. This range may be modified in the future.
This job is also eligible for bonus/incentive pay.
We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees.
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company's sole discretion, consistent with the law.
