Policy and Compliance Lead - USA Remote

Danaher Corporation

4d•$130,000 - $160,000•Remote

About The Position

Bring more to life. At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life. Our 63,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. Learn about the Danaher Business System which makes everything possible. The Policy and Compliance Lead is responsible for developing and implementing Policies and Standards that align with industry requirements. This role offers opportunities to work on cutting-edge security projects and grow your expertise in both business strategy and information security. This position is part of the Corporate Information Security and will be USA Remote base. In this role, you will have the opportunity to: Design, develop, and maintain comprehensive information security policies, standards, and procedures that align with regulatory requirements, industry frameworks (such as ISO 27001, NIST, SOC 2), and organizational objectives Lead compliance initiatives and assessments, coordinating with cross-functional teams to ensure adherence to applicable laws, regulations, and contractual obligations while identifying and remediating gaps Serve as a subject matter expert and trusted advisor to business units, providing guidance on policy interpretation, risk mitigation strategies, and security best practices Drive continuous improvement of the policy management lifecycle, including stakeholder engagement, policy reviews, exception management, and metrics reporting to leadership Collaborate with audit, legal, risk management, and technology teams to translate complex compliance requirements into practical, scalable solutions that support business growth The essential requirements of the job include: Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, or PCI DSS Demonstrated ability to translate complex technical and regulatory requirements into clear, actionable policies and procedures for diverse audiences Proven experience in preparing for and managing IT security audits (e.g., SOC 2, ISO 27001, PCI DSS). Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls. 3+ years of experience in information security, risk management, compliance, or policy development within a corporate environment. It would be a plus if you also possess previous experience in: Experience with governance, risk, and compliance (GRC) platforms and policy management tools, along with security automation and continuous compliance monitoring. Excellent written and verbal communication skills with proven experience influencing stakeholders at all organizational levels, including senior leadership At Danaher we believe in designing a better, more sustainable workforce. We recognize the benefits of flexible, remote working arrangements for eligible roles and are committed to providing enriching careers, no matter the work arrangement. This position is eligible for a remote work arrangement in which you can work remotely from your home. Additional information about this remote work arrangement will be provided by your interview team. Explore the flexibility and challenge that working for Danaher can provide. The salary range for this role is $130K-$160K. This is the range that we in good faith believe is the range of possible compensation for this role at the time of this posting. This range may be modified in the future. This job is also eligible for bonus/incentive pay. #LI-Remote We offer comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law. Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life. For more information, visit www.danaher.com. Danaher Corporation and all Danaher Companies are committed to equal opportunity regardless of race, color, national origin, religion, sex, age, marital status, disability, veteran status, sexual orientation, gender identity, or other characteristics protected by law. The U.S. EEO posters are available here. We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact:1-202-419-7762 or [email protected]. Danaher is a leading global life sciences, biotechnology, and diagnostics innovator, helping to solve many of the world’s most important health challenges, ultimately improving quality of life for billions of people today, while setting the foundation for a healthier, more sustainable tomorrow. The Danaher ecosystem is made up of more than 15 businesses united by a shared commitment to innovate for tangible impact. Please read our Applicant Data Privacy Notice carefully here.

Requirements

Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, or PCI DSS
Demonstrated ability to translate complex technical and regulatory requirements into clear, actionable policies and procedures for diverse audiences
Proven experience in preparing for and managing IT security audits (e.g., SOC 2, ISO 27001, PCI DSS). Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls.
3+ years of experience in information security, risk management, compliance, or policy development within a corporate environment.

Nice To Haves

Experience with governance, risk, and compliance (GRC) platforms and policy management tools, along with security automation and continuous compliance monitoring.
Excellent written and verbal communication skills with proven experience influencing stakeholders at all organizational levels, including senior leadership

Responsibilities

Design, develop, and maintain comprehensive information security policies, standards, and procedures that align with regulatory requirements, industry frameworks (such as ISO 27001, NIST, SOC 2), and organizational objectives
Lead compliance initiatives and assessments, coordinating with cross-functional teams to ensure adherence to applicable laws, regulations, and contractual obligations while identifying and remediating gaps
Serve as a subject matter expert and trusted advisor to business units, providing guidance on policy interpretation, risk mitigation strategies, and security best practices
Drive continuous improvement of the policy management lifecycle, including stakeholder engagement, policy reviews, exception management, and metrics reporting to leadership
Collaborate with audit, legal, risk management, and technology teams to translate complex compliance requirements into practical, scalable solutions that support business growth