Cybersecurity Manager - Policy & Training

Thank you for your interest in joining Solventum. Solventum is a new healthcare company with a long legacy of solving big challenges that improve lives and help healthcare professionals perform at their best. At Solventum, people are at the heart of every innovation we pursue. Guided by empathy, insight, and clinical intelligence, we collaborate with the best minds in healthcare to address our customers’ toughest challenges. While we continue updating the Solventum Careers Page and applicant materials, some documents may still reflect legacy branding. Please note that all listed roles are Solventum positions, and our Privacy Policy: https://www.solventum.com/en-us/home/legal/website-privacy-statement/applicant-privacy/ applies to any personal information you submit. As it was with 3M, at Solventum all qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Job Description:

3M Health Care is now Solventum

At Solventum, we enable better, smarter, safer healthcare to improve lives. As a new company with a long legacy of creating breakthrough solutions for our customers’ toughest challenges, we pioneer game-changing innovations at the intersection of health, material and data science that change patients' lives for the better while enabling healthcare professionals to perform at their best. Because people, and their wellbeing, are at the heart of every scientific advancement we pursue.

We partner closely with the brightest minds in healthcare to ensure that every solution we create melds the latest technology with compassion and empathy. Because at Solventum, we never stop solving for you.

The Impact You’ll Make in this Role

As a(n) Cybersecurity Manager - Policy & Training, you will have the opportunity to tap into your curiosity and collaborate with some of the most innovative and diverse people around the world. Here, you will make an impact by:

• Lead the development, review, update, and publication of cybersecurity policies and procedures.
• Maintain a structured and scalable policy lifecycle process including intake, review cycles, approvals, and publication workflows.
• Ensure policies and procedures align to recognized frameworks (e.g. NIST CSF and 800-53, ISO 27001, PCI-DSS, SOX, SOC 2 and other applicable standards).
• Maintain mapping between policies, procedures, and control requirements.
• Identify content gaps and drive continuous improvement in documentation quality and clarity.
• Communicate policy updates effectively to relevant stakeholders to support adoption and awareness.
• Lead execution of the global cybersecurity training and awareness program.
• Manage phishing simulations, reporting, and target education initiatives.
• Develop and coordinate annual and secondary cybersecurity content and delivery.
• Track awareness metrics and drive continuous improvement of engagement and reporting rates.
• Partner with stakeholders to promote a strong culture of security awareness across the enterprise.
• Work closely with IT, Legal, Privacy, HR, and business teams to integrate policies and procedures into operational practices.
• Support compliance efforts by ensuring documentation reflects implemented controls and operational processes.
• Provide structured updates and reporting to leadership on program status, maturity, and key initiatives.

Required Qualifications

• Bachelor's Degree (completed and verified prior to start).
• 7+ years of relevant Cybersecurity or IT experience.

Additional qualifications that could help you succeed even further in this role include:

• 3+ years of leadership or program management experience.
• Experience managing cybersecurity policies program for a new and growing company.
• Strong written communication and documentation skills. Technical writing experience a plus.
• Experience leading or supporting cybersecurity awareness and phishing simulation programs and improving cybersecurity awareness culture across the organization.
• Ability to operate effectively in a fast-paced, evolving environment.
• Strong cross-functional colaboration and stakeholder engagement skills and relationship building.
• Experiencing working with common cybersecurity and compliance frameworks (NIST, ISO, PCI, SOX, SOC-2, etc.)

Work location:

·       Remote

Travel: May include up to 10%