Senior Director IT, Cybersecurity Operations (Global Infrastructure, Medical Device Products, HCIT/Digital) (On-Site Deerfield, IL, Relocation Considered)

This is where you save and sustain lives

At Baxter, we are deeply connected by our mission. No matter your role at Baxter, your work makes a positive impact on people around the world. You’ll feel a sense of purpose throughout the organization, as we know our work improves outcomes for millions of patients. 

Baxter’s products and therapies are found in almost every hospital worldwide, in clinics and in the home. For over 85 years, we have pioneered significant medical innovations that transform healthcare.

Together, we create a place where we are happy, successful and inspire each other. This is where you can do your best work. 

Join us at the intersection of saving and sustaining lives— where your purpose accelerates our mission. 

Your Role at Baxter:

As a leading global medical device and pharmaceutical company ($10.6B, 38K employees), Baxter is dedicated to advancing the health and well-being of people around the world. Together, we are transforming healthcare with bold innovations that will help us realize our shared promise to improve care for all. Everything we do converges at the critical intersection where products that save and sustain lives meet the healthcare professionals and caregivers who make it all happen. 

As Baxter’s Senior Director IT, Global Cybersecurity Operations you will lead multiple teams responsible for maintaining Baxter Cybersecurity Operations. You will drive defense strategies across incident management, insider threat, and cyber tools teams, to ensure 24x7 monitoring, incident response, and threat-resilience of our organization's identities, digital assets, infrastructure, products (device and applications), manufacturing plants and sensitive data.

You will work across multiple technologies and groups within Cybersecurity, IT, R&D, corporate and business functions and external partners. Your experience will reflect a blend of technical expertise, operations experience, leadership capabilities, executive presence, experience managing external partners and a track record of managing high-performing teams in a visible, fast-paced environment.

What You’ll Be Doing:

Leadership and Strategy:

• Direction 24X7 cybersecurity operations teams- Incident Response, Insider Threat and Tools Engineering teams- to continually improve processes, protocols, and systems for detecting, responding to, and mitigating cyber threats.

• Align cyber strategy with Organizational needs, regulatory requirements, business objectives, risk management, and compliance.

• Influence Cyber Architecture on the necessary defense strategies to fortify Baxter’s cyber defenses.

• Work with CISO to continually strengthen Cyber Operational model. Manage recruitment, retention, and training of cyber operations talent to ensure the organization’s capabilities remain top-tier.

• Build high-performing teams through professional development opportunities for every member of Cyber Operations.

• Manage and engage with strategic partners for ongoing upkeep, maintenance and improvement of Baxter’s cybersecurity capabilities and tools.

• Manage and maintain Cyber- Operations budget, to minimal variances.

• Cultivate a culture of collaboration, accountability, and continuous improvement across all teams.

Reporting & Metrics:

• Establish and maintain cybersecurity metrics and KPIs to inform the efficacy and assurance of defense tactics and protections across Baxter enterprise and product ecosystems.

• Partner with the CISO to regularly report on the status of cyber operations to Cyber oversight groups and key stakeholders.

Incident Response and Cyber crisis management

• As the technical leader of the Cyber crisis management team, ensuring effective communications, timely and coordinated response during Enterprise, Product or third-party cyber incidents or breaches minimizing damage and recovery time.

• Direct the continual improvement and execution of the organization's Incident Response strategies (e.g. post-incident reviews to identify lessons learned) and improve preparedness.

• Oversee collaboration with Legal, Compliance, and PR teams to manage the organizational response to major security events. And maintain compliance with regulatory requirements.

Insider Threat (includes Data Exfiltration protection and Forensics):

• Oversee the organization's data protection strategy to proactively secure against the exfiltration of our most sensitive data and maintain c