This role pays less than
73%
of similar roles. Most pay
$139,400–$200,375
— the shaded band above.
At the midpoint, this role pays about
$145k
versus about
$170k
for comparable roles.
Based on 238 similar postings.
Employer
About Danaher Corporation
Danaher Corporation is a leading global science and technology innovator focused on biotechnology, diagnostics, and life sciences.
Danaher Corporation currently has
27 open roles
on FindRole.
Listed pay typically runs
$150,000–$175,000
across 23 roles with salary data.
The Policy and Compliance Lead joins the Corporate Information Security team to develop and implement policies, standards, and procedures that align with organizational objectives and industry requirements. This individual will lead compliance initiatives, coordinate with cross-functional teams to ensure adherence to laws and contractual obligations, and serve as a subject matter expert on risk mitigation strategies. The role involves managing the policy management lifecycle, including stakeholder engagement and metrics reporting. Key technical competencies include deep knowledge of regulatory frameworks such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, and PCI DSS. Candidates must be able to translate complex technical requirements into actionable procedures for diverse audiences. The role focuses on the critical domain of information security, specifically addressing the challenge of translating complex compliance requirements into scalable solutions that support business growth.
Design, develop, and maintain comprehensive information security policies, standards, and procedures aligned with regulatory requirements and industry frameworks.
Lead compliance initiatives and assessments to ensure adherence to laws, regulations, and contractual obligations.
Identify and remediate compliance gaps through coordination with cross-functional teams.
Serve as a subject matter expert providing guidance on policy interpretation and risk mitigation strategies.
Manage the policy lifecycle including stakeholder engagement, regular reviews, exception management, and metrics reporting.
Translate complex technical and regulatory requirements into practical, scalable solutions for business growth.
Prepare for and manage IT security audits such as SOC 2, ISO 27001, and PCI DSS.
What we're looking for
Must have at least 3 years of experience in information security, risk management, compliance, or policy development within a corporate environment.
Must possess strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, or PCI DSS.
Must be able to translate complex technical and regulatory requirements into clear, actionable policies for diverse audiences.
Must have proven experience preparing for and managing IT security audits like SOC 2, ISO 27001, and PCI DSS.
Must possess strong knowledge of compliance frameworks and the ability to translate requirements into actionable controls.
Must have excellent written and verbal communication skills with experience influencing stakeholders at all levels, including senior leadership.
Preferred experience includes using GRC platforms, policy management tools, security automation, and continuous compliance monitoring.
Responsible AI
Privacy
SQL
Python
R
Tableau
Power BI
NIST AI RMF
OECD Principles
ISO/IEC 42001
Generative AI
Data Science
Compliance
Governance
Control Design
Data Mapping