Job Description Summary

Job Description

We are the makers of possible

BD is one of the largest global medical technology companies in the world. Advancing the world of health™ is our Purpose, and it’s no small feat. It takes the imagination and passion of all of us—from design and engineering to the manufacturing and marketing of our billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities.

We believe that the human element, across our global teams, is what allows us to continually evolve. Join us and discover an environment in which you’ll be supported to learn, grow and become your best self. Become a maker of possible with us.

The Cybersecurity Risk Assessment Lead is a key member of the Digital Risk & Resiliency Management​ Team. The Digital Risk & Resiliency Management​ Team drives resiliency across the digital enterprise, managing digital risks across our shared delivery areas (IT, OT and R&D) through consistent risk assessments, maintenance of an accurate risk register and reporting key risks to senior management. The Cybersecurity Risk Assessment Lead manages risk assessment activities across the organization, ensuring that all business operations are conducted in a manner that minimizes risk exposure for BD.

Description 

The Cybersecurity Risk Assessment Lead reports into the Associate Director of Cybersecurity & Digital Risk Management and is responsible for operational oversight of the risk assessment activities conducted by our managed service provider. This role focuses on facilitating the risk assessment process and ensuring that risk remediation recommendations are effectively communicated in close collaboration with the Digital Risk Management Lead.

Responsibilities 

• Operational Oversight:

  • Oversee the day-to-day activities of the managed service provider to ensure compliance with organizational controls, standards and policies.

  • Monitor the progress and quality of risk assessments conducted by the managed service provider.

• Risk Assessment Facilitation:

  • Facilitate the risk assessment process to ensure it is conducted efficiently and effectively.

  • Review and validate risk assessment reports and findings.

• Communication and Coordination:

  • Coordinate the communication of risk assessment results and remediation recommendations to technical teams.

  • Ensure that technical teams understand risk remediation requirements.

  • Act as a liaison between internal stakeholders and the managed service provider.

• Continuous Improvement:

  • Identify opportunities for improving the risk assessment process.

  • Stay updated on the latest cybersecurity threats, trends, and best practices.

  • Implement best practices to enhance the effectiveness of risk assessments.

• Compliance and Reporting:

  • Ensure compliance with relevant regulations, standards, and policies.

  • Prepare and present regular reports on risk assessment activities and outcomes.

  • Collaborate with the Risk Management Leads to monitor and report on the effectiveness of risk mitigation measures.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.

• Minimum of 5 years of experience in cybersecurity risk management.

• Proven experience in leading and managing teams.

• Strong understanding of risk assessment processes and Frameworks.

• Excellent communication and interpersonal skills.

• Relevant certifications (e.g., CISSP, CISM, CRISC) are highly desirable.

At BD, we prioritize on-site collaboration because we believe it fosters creativity, innovation, and effective problem-solving, which are essential in the fast-paced healthcare industry. For most roles, we require a minimum of 4 days of in-office presence per week to maintain our culture of excellence and ensure smooth operations, while also recognizing the importance of flexibility and work-life balance. Remote or field-based positions will have different workplace arrangements which will be indicated in the job posting.

For certain roles at BD, employme