The Technical Leader for the Product Cybersecurity Program and Product Security Incident Response Team (PSIRT) provides leadership for medical device cybersecurity across Bio‑Rad’s Clinical Diagnostics portfolio. This role owns the strategy, governance, and execution of the product cybersecurity program, ensuring compliance with FDA cybersecurity requirements and global standards while driving program maturity across the organization and product lifecycle. This position serves as the authoritative technical leader for product cybersecurity, accountable for vulnerability management, incident response, regulatory alignment, and cross‑functional coordination. The role operates at the program level, enabling and guiding product teams rather than replacing their functional ownership.
How You'll Make An Impact:
Program Leadership & Governance
- Own and evolve the Product Cybersecurity Program, including PSIRT governance, operating model, decision authority, and escalation paths.
- Establish and maintain alignment with FDA medical device cybersecurity expectations, including premarket and post-market requirements for vulnerability management, coordinated disclosure, and incident response.
- Define and maintain the cybersecurity framework aligned to NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032, and ensure integration with Global IT security practices.
- Embed product cybersecurity requirements into the Global Quality Management System (QMS), including Design Controls, risk management, and change management.
Cross‑Functional Enablement
- Lead the cross‑functional Cybersecurity Core Team, ensuring sustained engagement and prioritization across R&D, Software, Systems, QA/RA, Global Supply Chain (Manufacturing and Procurement), and Global Information Security.
- Provide clear expectations, guidance, and oversight to product teams for secure design, development, and maintenance, without assuming direct development ownership.
- Ensure cybersecurity considerations are integrated throughout the product lifecycle, from concept and design through post‑market support.
Vulnerability & Incident Management (PSIRT)
- Serve as the single point of accountability for product cybersecurity intake, triage, and prioritization.
- Oversee end‑to‑end vulnerability management, including risk assessment, remediation planning, regulatory timelines, and customer deployment.
- Lead technical coordination for cybersecurity incident investigations, containment, and remediation, ensuring timely and effective response to high‑severity issues.
- Guide product teams on mitigations, patches, and workarounds to ensure security and regulatory expectations are met.
Regulatory & External Communication
- Ensure cybersecurity incidents and disclosures comply with FDA, international regulatory, and internal quality requirements.
- Oversee the development and approval of security advisories, customer notifications, and regulatory communications.
- Act as the technical authority in engagements with external security researchers, customers, regulators, and industry groups.
Training, Metrics & Continuous Improvement
- Drive cybersecurity awareness and training for R&D, Support, and Quality teams to reinforce a security‑first culture.
- Define, track, and report program‑level cybersecurity and PSIRT performance metrics to leadership.
- Continuously improve program effectiveness based on metrics, lessons learned, and evolving regulatory expectations.
What You Bring:
- Bachelor’s degree in Computer Science, Information Security, Engineering or a related field.
- 7+ years of experience in cybersecurity, including architecture design in a regulated environment (preferably FDA, healthcare, or medical devices).
- A system thinker with deep expertise in medical device cybersecurity, including FDA premarket and post market cybersecurity requirements.
- Expert knowledge of NIST CSF 2.0, ISO 81001‑5‑1, ISO/IEC TS 27110, and ISO/IEC 27032.
- Proven ability to lead cross‑functional programs in complex, matrixed organizations.
- Strong technical judgment, communication skills, and executive presence.
- Demonstrated ability to build, mature, and scale cybersecurity programs across organizations.
- Preferred: Master’s degree in a technical field.
- Certifications: CISSP, CSSLP, CISM, or equivalent.
- Experience with cloud-based systems, IoT security, or medical device security.
Location: This position must be based in Hercules, CA or Irvine, CA and requires the employee to be located within commuting distance of the office.
Total Rewards Package: At Bio-Rad, we’re empowered by our purpose and recognize that our employees are as well. That’s why we offer a competitive and comprehensive Total Rewards Program that provides value, quality, and inclusivity while satisfying the diverse needs of our evolving workforce. Bio-Rad's robust offerings serve to enrich the overall health, wealth, and wellbeing of our employees and their families through the various stages of an employee’s work and life cycle.
Benefits: We’re proud to offer a variety of options, including competitive medical plans for you and your family, free HSA funds, a new fertility offering with stipend, group life and disability, paid parental leave, 401k plus profit sharing, an employee stock purchase program, a new upgraded and streamlined mental health platform, extensive learning and development opportunities, education benefits, student debt relief program, pet insurance, wellness challenges and support, paid time off, Employee Resource Groups (ERG’s), and more!
Compensation: The estimated base salary range for this position is $179,400 - $246,600 at the time of posting. Actual compensation will be provided in writing at the time of offer, if applicable, and is based on several factors we believe fairly and accurately impact compensation, including geographic location, experience, knowledge, skills, abilities, and other job permitted factors. This position is also eligible for a variable annual bonus, which is dependent upon achievement of your individual objectives and Company performance.
Who We Are: For 70 years, Bio-Rad has focused on advancing the discovery process and transforming the fields of science and healthcare. As one of the top five life science companies, we are a global leader in developing, manufacturing, and marketing a broad range of high-quality research and clinical diagnostic products. We help people everywhere live longer, healthier lives. Bio-Rad offers a unique employee experience with collaborative teams that span the globe. Here, you are supported by leadership to build your career and are empowered to drive change that makes an impact you can see.
EEO Statement: Bio-Rad is an Equal Employment Opportunity/Affirmative Action employer, and we welcome candidates of all backgrounds. Veterans, people with physical or mental disabilities, and people of all race, color, sex, sexual orientation, gender identity, religion, national origin and citizenship status are encouraged to apply.
Agency Non-Solicitation: Bio-Rad does not accept agency resumes, unless the agency has been authorized by a Bio-Rad Recruiting Representative. Please do not submit resumes unless authorized to do so. Bio-Rad will not pay for any fees related to unsolicited resumes.
Fraud Alert: Bio-Rad has received reports of individuals posing as Bio-Rad recruiters to obtain information, including personal and financial, from applicants. Beware of these fake "recruiters" and job scams. Click here for more information on this scam and how to avoid it. #LI-PB1
Legal Entity: (USA_1000)Bio-Rad Laboratories, Inc.
