Technical Leader, Product Cybersecurity Program & PSIRT

Job title: Technical Leader, Product Cybersecurity Program & PSIRT

About the Role The Technical Leader for Bio-Rad’s Product Cybersecurity Program and PSIRT provides strategic leadership for medical device cybersecurity across Bio-Rad’s Clinical Diagnostics portfolio. You will own the strategy, governance, and execution of the product cybersecurity program, ensuring FDA cybersecurity requirements and global standards are met while guiding product teams through the lifecycle.

What You'll Do

• Own and evolve the Product Cybersecurity Program, PSIRT governance, operating model, escalation paths; align with FDA expectations for vulnerability management, coordinated disclosure, and incident response.
• Define and maintain the cybersecurity framework aligned to NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032; ensure integration with Global IT security practices.
• Embed product cybersecurity requirements into the Global Quality Management System (QMS), including Design Controls, risk management, and change management.
• Lead cross-functional Cybersecurity Core Team; ensure sustained engagement and prioritization across R&D, Software, Systems, QA/RA, Global Supply Chain (Manufacturing and Procurement), and Global Information Security; provide guidance to product teams for secure design, development, and maintenance without direct development ownership.
• Ensure cybersecurity considerations are integrated throughout the product lifecycle, from concept and design through post-market support.
• Vulnerability & Incident Management (PSIRT): Serve as the single point of accountability for product cybersecurity intake, triage, and prioritization; oversee end-to-end vulnerability management, including risk assessment, remediation planning, regulatory timelines, and customer deployment; coordinate investigations and remediation.
• Guide product teams on mitigations, patches, and workarounds to meet security and regulatory expectations.
• Regulatory & External Communication: Ensure cybersecurity incidents and disclosures comply with FDA, international regulatory, and internal quality requirements; oversee the development and approval of security advisories, customer notifications, and regulatory communications; act as the technical authority in engagements with external security researchers, customers, regulators, and industry groups.
• Training, Metrics & Continuous Improvement: Drive cybersecurity awareness and training for R&D, Support, and Quality teams; define, track, and report program-level cybersecurity and PSIRT performance metrics; continuously improve program effectiveness based on metrics, lessons learned, and evolving regulatory expectations.

What We're Looking For

• Bachelor’s degree in Computer Science, Information Security, Engineering or related field.
• 7+ years of experience in cybersecurity, including architecture design in a regulated environment (FDA, healthcare, or medical devices).
• A system thinker with deep expertise in medical device cybersecurity, including FDA premarket and post-market cybersecurity requirements.
• Expert knowledge of NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032.
• Proven ability to lead cross-functional programs in complex, matrixed organizations.
• Strong technical judgment, communication skills, and executive presence.
• Demonstrated ability to build, mature, and scale cybersecurity programs across organizations.

Nice to Have

• Master’s degree in a technical field.
• Certifications: CISSP, CSSLP, CISM, or equivalent.
• Experience with cloud-based systems, IoT security, or medical device security.

Compensation & Benefits

• Total Rewards Package with competitive medical plans, free HSA funds, fertility stipend, group life and disability, paid parental leave, 401k plus profit sharing, employee stock purchase program, an upgraded mental health platform, extensive learning and development opportunities, education benefits, student debt relief program, pet insurance, wellness challenges and support, paid time off, Employee Resource Groups, and more!