Manager IT, Security.
B. BRAUN MEDICAL (US) INCCompany: B. BRAUN MEDICAL (US) INC
Job Posting Location: Bethlehem, Pennsylvania, United States
Functional Area: Information Technology
Working Model: Hybrid
Days of Work: Friday, Thursday, Wednesday, Tuesday, Monday
Shift: 5X8
Relocation Available: No
Requisition ID: 6842
B. Braun Medical Inc., a leader in infusion therapy and pain management, develops, manufactures, and markets innovative medical products and services to the healthcare industry. Other key product areas include nutrition, pharmacy admixture and compounding, ostomy and wound care, and dialysis. The company is committed to eliminating preventable treatment errors and enhancing patient, clinician and environmental safety. B. Braun Medical is headquartered in Bethlehem, Pa., and is part of the B. Braun Group of Companies in the U.S., which includes B. Braun Interventional Systems, Aesculap® and CAPS®.
Globally, the B. Braun Group of Companies employs more than 64,000 employees in 64 countries. Guided by its Sharing Expertise® philosophy, B. Braun continuously exchanges knowledge with customers, partners and clinicians to address the critical issues of improving care and lowering costs. To learn more about B. Braun Medical, visit www.bbraunusa.com
Position Summary:
The Senior Information Security Specialist provides guidance and solutions concerning the effective implementation of reasonable and appropriate Information Security controls necessary to protect information assets and the supporting environment. This position will lead and support efforts to identify, report on, and resolve Information Security issues, to include continuous improvement of the security program standards and practices. The successful candidate identifies, investigates, analyzes, and remediates information security events in order to reduce exposure to risk.
Expertise: Qualifications -Education/Experience/Training/Etc
Required:
- Bachelor's degree required or equivalent combination of education and experience.
- 10-12 years related experience required.
- Applicable industry/professional certification preferred.
- Regular and predictable attendance
- Ability to work non-standard schedule as needed, On-call hours as needed
While performing the duties of this job, the employee is regularly required to sit and talk or hear. The employee frequently is required to use hands to handle or feel and reach with hands and arms. The employee is occasionally required to stand and walk. The employee must occasionally lift and/or move up to 20 pounds.
Responsibilities: Essential Duties
- Provides technical expertise and support in operational and implementation aspects of Information Security framework controls, activities, and products.
- Assess and support Information Security controls, risk, and exposure for new and existing infrastructure and processes.
- Reviews newly provisioned and existing systems to assure alignment with security architecture standards; meet security requirements; and identify potential exposure to risk.
- Assesses new projects and implementations to assure expected security controls are in place.
- Maintains an awareness of existing and proposed security standards groups, state and federal legislation and regulations pertaining to information security and identify regulatory changes that will affect information security policy, standards and procedures.
- Performs, supports and coordinates forensic analysis as necessary to support security investigations and supports incident response in security breaches.
- Keeps informed of current technologies, trends, standards, and industry issues related to security and risk management.
- Defines and revises SOPs and system validation plans as required to meet corporate business needs and supports the company’s regulatory requirements.
- Prepares project status reports to inform management of project progression. Identifies any issues, which need to be escalated for resolution or assistance.
As the Security & Compliance Lead, you will:
Architect & Own the Security Posture – Map threat models, design layered defenses, and maintain a roadmap aligned with CIS Benchmarks, NIST SP 800-53, ISO 27001, PCI DSS v4, GDPR/CCPA, and other relevant standards.
Automate Security in the SDLC – Embed SAST, DAST, SCA, container, and IaC scans into CI/CD pipelines; enforce risk-based “security gates” with documented risk acceptance.
Lead Compliance & Governance – Drive external audits (PCI, SOC 2, HIPAA, etc.), automate evidence collection in SIEM/GRC platforms, and present risk posture in clear business language to executives.
Direct Incident Response – Maintain version-controlled IR playbooks, coordinate triage/forensics/post-mortems, run quarterly tabletop exercises, and reduce MTTR with automation-ready runbooks.
Drive Vulnerability & Threat Management – Correlate threat intel and CVE feeds with the asset inventory, prioritize remediation, enforce SLAs, and publish scorecards and risk heat maps.
Serve as Security Design Authority – Review and approve architectures, pull requests, and infrastructure changes; chair the Security Change Advisory Board (CAB) and validate rollback plans.
Validate Defenses Offensively – Execute penetration tests and purple-team exercises; oversee continuous attack surface mapping, remediation, and retesting.
Operate & Optimize Security Tooling – Manage WAF, SIEM, EDR, and cloud/SaaS guardrails across AWS, Azure, GCP, and key SaaS platforms; optimize detections and dashboards.
Mentor & Evangelize – Publish secure coding standards, deliver developer/SRE training, and foster a security-first culture across teams.
Measure & Improve – Define and track KPIs/KRIs (e.g., vulnerability age, scan coverage, incident MTTR, automation ROI, playbook effectiveness) and drive quarterly improvements.
Evaluate & Integrate AI/ML – Assess anomaly-detection models, LLM-assisted code review, and automated playbook generation while ensuring privacy, bias, and compliance controls.
Expertise: Knowledge & Skills
- Requires advanced knowledge of professional field and industry. Influences the development of and drives the application of principles, theories, concepts. Determines best course of action.
- Work under minimal supervision. Relies on experience and judgement to plan and accomplish assigned goals. May periodically assist in orienting, training, and/or reviewing the work of peers.
- Judgement is required in resolving complex problems based on experience.
- Contacts are primarily with department supervisors, leads, subordinates, and peers. Occasional contact with external contractors/vendors.
Responsibilities: Other Duties:
The preceding functions have been provided as examples of the types of work performed by employees assigned to this position. To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed in this description are representative of the knowledge, skill, and/or ability required. Management reserves the right to add, modify, change or rescind the work assignments of different positions due to reasonable accommodation or other reasons.
Physical Demands:
While performing the duties of this job, the employee is expected to:
- Light work - Exerting up to 20 lbs of force occasionally, and/or up to 10 pounds of force frequently, and/or a negligible amount of force constantly to move objects.
Lifting, Carrying, Pushing, Pulling and Reaching:
- Occasionally:Reaching upward and downward, Push/pull, Stand
- Frequently:Sit
- Constantly:N/A
Activities:
- Occasionally:Climbing stairs/ladders, Push/pull, Reaching upward and downward, Standing, Walking
- Frequently:Finger feeling, Kneeling/Crawling, Seeing - depth perception, color vision, field of vision/peripheral, Sitting , Talking - ordinary, loud/quick
- Constantly:N/A
Environmental Conditions:
- Occasionally:N/A
- Frequently:N/A
- Constantly:N/A
Work Environment:
The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
- Noise Intensity:Moderate
- Occasionally:Other
- Frequently:N/A
- Constantly:Office environment
Base Salary: $130K - $145K
#LI
#IND123
The targeted range for this role takes into account a range of factors that are considered when making compensation and hiring decisions; included but not limited to: skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. Compensation decisions are dependent on the facts and circumstances of each case. The range provided is a reasonable estimate.
B. Braun offers an excellent benefits package, which includes healthcare, a 401(k) plan, and tuition reimbursement. To learn more about B. Braun and our safety healthcare products or view a listing of our employment opportunities, please visit us on the internet at www.bbraunusa.com.
Through its “Sharing Expertise®” initiative, B. Braun promotes best practices for continuous improvement of healthcare products and services.
We are an equal opportunity employer. We evaluate applications without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, pregnancy, genetic information, disability, status as a protected veteran, or any other protected characteristic. Know Your Rights: Workplace Discrimination is Illegal, click here.
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status.
PI277600676