Director, Product Security - MMS Dispensing

Becton Dickinson Medical Devices•San Diego, CA

21d

About The Position

Excited to grow your career? We value our talented employees, and whenever possible strive to help one of our associates grow professionally before recruiting new talent to our open positions. If you think the open position you see is right for you, we encourage you to apply! Our people make all the difference in our success. We are the makers of possible! BD is one of the largest global medical technology companies in the world. Advancing the world of health ™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a maker of possible with us. The Product Security Office (PSO) ensures product security risks for BD’s software-based products and solutions are managed well over the lifecycle as they make a difference for our patients and customers. In the PSO, we offer flexibility so you can successfully balance your work and personal responsibilities. We care about our associates and ensure we have servant leaders to help you grow your career, provide feedback and recognition, and empower you to show up every day as your authentic self. We are passionate about improving patient outcomes and enabling our R&D teams to create and maintain innovative solutions in a secure manner. Armed with a growth mindset and a desire to want to do more, learn more, impact more, you are in a great position to join us as a product security leader to help BD advance the world of health in ways you may never have imagined in your career. The Director, Product Security is responsible for BD’s product security posture for the Dispensing platform in the Medication Management Solutions Business Unit. Reporting to the VP, R&D, Product Security, this individual will help the PSO provide guidance to successfully deliver best-in-class secure products, consistent with global regulatory requirements over the lifecycle. This role works in close partnership with R&D, Enterprise Security, Quality, Regulatory Affairs, Legal, business leaders and functional authorities at corporate, regional, and business-unit (BU) levels to collaboratively advance strategic priorities and promote agile management of the opportunities within the business unit platform. They shall partner with the business unit platform leaders on business strategy and plans to drive security strategies into annual strategic plans, as appropriate. The successful candidate will direct a team of product security resources while influencing and partnering with R&D teams to develop and implement product security plans over the full product lifecycle, including innovation, new product development and sustaining engineering that will meet the expectation of customers and product regulators (e.g., US CDRH, EU Notified Bodies, global MOHs etc.) This role will be hands on when required but is additionally responsible to develop strong leaders in their team with capabilities that align to the strategy and transform their respected platforms and business units to maintain outstanding performance. This includes the execution of product security program activities (e.g., risk assessment, awareness/training, incident response, pivotal initiatives, championing end of support on legacy products and external engagements).

Requirements

Undergraduate or Graduate degree in cybersecurity, computer science, software engineering or/and technical engineering or scientific field is required, advanced business or technical degree preferred
Ten (10)+ years professional business experience
Five (5)+ years leading teams and people
Three (3)+ years in a Product Security and/or Application Development Security function in a regulated environment
Experience with connected products, software development lifecycle, security automation, risk mitigation strategies, incident response, and supply chain security are preferred
Certifications such as CCNA, CCIE, CISSP, CISM, GIAC, MCSE, CCSP or equivalent, CEH are preferred
Ability to communicate sophisticated technical challenges in a non-technical and simplified manner to business audience
Ability to align and connect business strategies with technology solutions that will mitigate risk
Solid understanding of the medical device and healthcare IT space
Advanced analytical and problem-solving skills
Excellent presentation and communication skills including engaging with and presenting to senior leadership team
Strong collaboration skills, including conflict resolution
Strong communication skills to effectively drive technical and business discussions
Ability to lead execution on multiple concurrent efforts
Highly motivated, execution-focused attitude
Experience with connected products, software development lifecycle, security automation, risk mitigation strategies, incident response, and supply chain security are preferred
Strong understanding of a wide variety of cybersecurity attacks, threats, threat analysis, ethical hacking and system auditing coupled with experience with incident management
Experience navigating and driving product cybersecurity requirements with 510(k) and PMA- regulated products

Responsibilities

Collaborate with all levels and geographies within the Dispensing platform, including senior executives, to advance the product security strategy and objectives within the portfolio.
Leadership & Management: Build and lead a high performing team to manage multiple projects and programs, providing strategic planning and direction for the platform. Develop product security resources’ leadership skills. Lead and develop product security resources skills in program management and cross functional collaboration with stakeholders.
Technology Leadership: Provide strategic guidance on architecture reviews, threat models, implementing security technologies, overseeing security risk assessments and capability maturity. Provide leadership and guidance to product security resources on critical Product Security issues, tactical alignment, and pivotal initiatives.
Align business unit platform around common benchmarks and goals for BD’s enterprise - wide Product Security posture, assessing progress towards these goals while driving improvement.
Operational Management: Oversee budgeting, resource allocation, and process improvement to ensure efficient and effective security engineering operations.
Cross Functional Collaboration: Lead the adoption of product security framework activities, consistent with applicable global regulations and laws in partnership with other cross functional teams. Oversee delivery of all required product security quality and regulatory documentation associated with product launches in Dispensing.
Champion initiatives such as demonstrating innovative product security processes & technologies or end of support for legacy platforms. Enable End-to-End Lifecycle Management of products in partnership with R&D, PMO, Quality and Regulatory.
Stakeholder Management: Develop trust and confidence of company leaders. Serve as internal security consultant to the organization. Articulate high-level risks and mitigation plans to Senior Management. Communicate effectively to ensure alignment with business goals and technical feasibility. Engaging BD leadership, customers, federal and international agencies when issues occur as well as speaking in public forums and managing customers and external partnerships where applicable.
Performance Metrics: Be accountable for key performance metrics and drive continuous improvement initiatives.
May perform other duties as required