Director, Security

About the role

The Director of IT Security plays a critical role in driving the medical technology industry forward through transforming patient care and creating better patient outcomes. Reporting directly to the CIO, this position oversees the global enterprise information security program, ensuring robust protection against cyber threats and embedding security-by-design into all aspects of IT.

Responsibilities

• Develop and execute a cohesive global cybersecurity strategy that supports the "One Enovis" IT transformation and corporate vision.
• Own and continuously mature the enterprise Information Security Program, aligning with NIST CSF, ISO 27001, and healthcare-specific frameworks.
• Define and enforce enterprise security policies, standards, and procedures across all global business units.
• Present security posture, risk metrics, and program updates to executive leadership and external auditors.
• Lead the organization's cyber risk management program, including risk assessment, risk register maintenance, and risk treatment planning.
• Manage the annual security budget; optimize spend across tools, services, staffing, and managed security providers.
• Oversee the 24x7 Security Operations Center (SOC) ensuring rapid detection and response to threats.
• Drive vulnerability management, penetration testing, and programs to proactively identify and remediate exposures across all environments.
• Govern threat intelligence operations to anticipate emerging threats targeting healthcare organizations globally.
• Lead security architecture review for all major infrastructure and application initiatives, ensuring security-by-design.
• Oversee identity and access management (IAM/PAM) strategy, including MFA enforcement, SSO, and privileged access governance.
• Lead enterprise cybersecurity risk assessment and regulatory compliance, including HIPAA, FDA cybersecurity requirements for medical devices, GDPR, and other global standards.
• Design and execute an enterprise-wide security awareness and training program tailored to all staff globally.
• Run simulated phishing and social engineering campaigns; track and report behavior metrics to leadership.
• Act as a security champion and culture carrier, fostering a 'security is everyone's responsibility' mindset across the global workforce.

Qualifications

• 7+ years' experience leading global cybersecurity teams and programs, preferably in medical technology, healthcare, or other highly regulated industries.
• Demonstrated success leading cybersecurity aspects of large-scale IT integrations, ERP transitions, systems harmonization, and M&A integrations within complex, multi-business-unit organizations.
• Proven ability to streamline and mature diverse security landscapes into efficient, scalable, enterprise-grade programs while supporting the unique needs of individual business units.
• Deep hands-on knowledge of HIPAA Security Rule, HITRUST CSF, NIST CSF, and SOC 2 frameworks.
• Proven track record leading incident response for significant cybersecurity events, including ransomware and data breach scenarios.
• Experience managing and reporting to executive leadership and Board-level Risk/Audit committees.
• Strong knowledge of cloud security (AWS, Azure, GCP), zero trust architecture, and modern IAM/PAM solutions.
• Excellent communication skills: ability to translate complex security risk into clear business language.

Benefits

We offer a comprehensive benefits package that includes medical insurance, dental insurance, vision insurance, spending and savings accounts, 401(k) plan, income protection plans, discounted insurance rates, legal services, vacation, sick leave, holidays, and more. Equal Employment Opportunity is provided. We strive to accommodate the unique beliefs and practices of every employee.