The Vice President, Information Security - Manufacturing Plant Security, Product Security & Application Security joins the Global Information Security organization to protect global manufacturing plants, connected products, and software engineering environments. This leader owns the security strategy for manufacturing plant OT/ICS security, product security for IoT-enabled digital health products, and application security across engineering organizations. Key responsibilities include leading global strategy execution, managing FDA medical device cybersecurity compliance, and overseeing CI/CD pipeline security and DevSecOps practices. The role requires expertise in OT/ICS frameworks like IEC 62443 or NIST 800-82, as well as SAST/DAST/SCA tools. The position involves building a global team of security professionals to manage risks across manufacturing, product, and application domains for a multi-country organization spanning over fifty countries.
Lead global strategy and execution for manufacturing plant (OT/ICS) security across 14+ operating companies.
Own product security strategy for IoT-enabled and connected digital health products, ensuring FDA cybersecurity compliance.
Direct application security strategy, including CI/CD pipeline security, DevSecOps practices, and AI-assisted development governance.
Build and lead a global team of function leaders and embedded security professionals.
Partner with operating company presidents and executives to embed security into daily business operations.
Establish a consolidated risk management framework with clear metrics and executive reporting for all security domains.
Represent the company's security strategy and risk posture to executive leadership and audit committees.
What we're looking for
Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent professional experience.
12+ years of information security experience, including direct ownership of manufacturing plant (OT/ICS), product, or application security in a global organization.
Experience with FDA medical device cybersecurity requirements, including premarket submissions under Section 524B and post-market vulnerability management.
Experience applying OT/ICS security frameworks such as IEC 62443 or NIST 800-82 within manufacturing or industrial environments.
Experience with modern application security tooling, including CI/CD pipeline security, SAST/DAST/SCA, and cloud-native application security.
Experience leading an information security function through multiple layers of management across global, multi-site organizations.
Experience operating across a multi-country organization spanning 50 or more countries.
Ability to travel domestically and internationally up to 30% of the time.
Experience within a diversified, multi-business-unit organization with a decentralized business model (preferred).
Professional certification such as CISSP, CISM, or GICSP (preferred).
Experience presenting to boards, audit committees, or executive risk committees (preferred).
IT Infrastructure
Software Development
Application Development
Data Technology
Quality Engineering
IT Policy
ITIL
PMP
CISSP
Networks
Systems
IT Management
Software Engineering Processes
Technology Modernization