Job Description Summary

The Product Security Manager for Process, Tooling, and Training will be responsible for continuous improvement and process excellence within the Strategic Realization Office. Additionally, this individual will be responsible for administration, training, and effective usage of cybersecurity tools for development of medical devices across BD’s business units (BUs). The position will require an individual experienced in process improvement, project management, and change management for a large organization. The candidate will leverage digital tools and process automation to drive functional excellence. This person will report to the Director, Product Security Process Excellence.

Job Description

We are the makers of possible 

 

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. 

 

We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a maker of possible with us. 

The candidate will focus on enabling R&D teams to operationalize BD’s overarching product security framework with the Global Product Development Process (e.g. risk management and reporting, threat modeling, vulnerability management).  This person will identify trends in cybersecurity process and tool effectiveness and formulate continuous improvement initiatives.

The Product Security Manager for Process, Tooling, and Training will utilize available corporate and BU resources with expertise in security engineering, architecture, testing, incident response, and program management.
 

Responsibilities:

• Accountable for administration of Product Security software applications and tooling used in the implementation of BD’s cybersecurity framework.

• Accountable for vendor relationships, licensing agreements, annual renewal process, user licensing and assuring contractual compliance, cost analysis for budgeting, and evaluating effectiveness of tools and applications across business units.

• Technical responsibilities include support for training and documentation for product security engineering software applications and tools.  Develops expertise in security tools, produces and delivers training programs, assesses capability of product security and development team engineers. New tool and software application assessments.

• Management activities include project coordination, organization, and reporting.

• Team responsibilities include participation in strategic discussions and team development meetings.

• Significant contributor to improvements of the Product Security policies and procedures.

• Supports BU adoption of product security framework activities.

• May perform other duties as required.

Required Qualifications:

• A minimum of a bachelor’s degree required. Ideal candidate will have a degree in software development, engineering, or technical discipline.

• At least 2 years of experience required in systems engineering requirements management.

• A minimum of 2 years of experience in process improvement, preferably with a large organization.

• Minimum of 2 years of experience working in a regulated industry required.

• Excellent communication skills with ability to operate in a multinational business with a comprehensive product portfolio.

• Proven organizational change management and project management skills.

• Ideal candidate will have direct experience working in a highly federally regulated environment like healthcare, hospitals, pharmaceutical companies, etc. with a strict software development security process and standards.

Preferred Qualifications:

• Related cybersecurity tools and process experience: Static Code Analysis, Software Composition Analysis, Tenable.IO, SBOM, PKI, code signing, system hardening, whitelisting, and threat modeling.

• Combined experience with new product development, remediation, applications software development and cybersecurity design projects; not just scripting

For certain roles at BD, employment is contingent upon the Company’s receipt of sufficient proof that you are fully vaccinated against COVID-19. In some locations, testing for COVID-19 may be available and/or required. Consistent with BD’s Workplace Accom