VP, Chief Information Security Officer (CISO

Additional Location(s):

US-MN-Arden Hills

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.

The Chief Information Security Officer (CISO) is responsible for defining and executing Boston Scientific’s enterprise-wide information security strategy, ensuring the protection of patient data, intellectual property, and global business operations.

This role serves as an enterprise security leader and trusted advisor to the executive team, providing objective, risk-based guidance to protect the company while enabling business growth. The CISO drives the evolution of cybersecurity capabilities, resilience, and governance while embedding security into the company’s digital, cloud, and innovation agenda.

• Define and execute a global cybersecurity strategy and multi-year roadmap aligned to enterprise priorities and risk appetite
• Lead a global security strategy that accounts for regional and country-specific requirements, ensuring enterprise standards are effectively adapted and managed across diverse regulatory, business, and operational environments
• Serve as the primary advisor to the CIO, executive leadership, and Board on cybersecurity risks, posture, and investments
• Define strategy for securing emerging technologies, including artificial intelligence, machine learning, and advanced analytics, ensuring safe and responsible adoption across the enterprise
• Drive security as a business enabler, ensuring alignment with commercial, clinical, and innovation objectives
• Lead and mature a high-performing global information security organization, including internal teams and external partners

• Establish and scale a risk-based security operating model, aligned to industry frameworks (e.g., NIST, ISO 27001)
• Partner with business and functional leaders to prioritize investments using risk, financial, and operational impact models
• Oversee enterprise security governance, policies, standards, and controls
• Ensure compliance with global regulatory requirements (e.g., FDA, HIPAA, GDPR, and other regional regulations)

• Oversee design and operation of security architecture and controls, including:
• Network and endpoint security
• Identity and access management
• Cloud security (IaaS/PaaS/SaaS)
• Threat detection and response capabilities
• Lead modernization of security tooling and platforms (e.g., SIEM, EDR, zero trust frameworks)
• Ensure effective vulnerability management and remediation programs

• Serve as executive lead for cybersecurity incidents and crisis response
• Establish and oversee enterprise incident response, business continuity, and disaster recovery programs
• Monitor and respond to evolving threats including advanced persistent threats (APTs), ransomware, phishing, and supply chain vulnerabilities
• Drive continuous improvement through post-incident reviews and threat intelligence

• Lead enterprise strategies to protect sensitive data (PHI/PII), clinical data, and intellectual property
• Ensure strong data governance, classification, and protection controls
• Partner with Legal and Compliance on privacy and data protection initiatives

• Act as a trusted partner to global business units, embedding security into product development, digital, and commercial initiatives
• Build strong cross-functional partnerships across IT, R&D, Quality, Regulatory, Legal, and Commercial teams
• Communicate clearly with executive stakeholders and Board-level audiences

• Foster a security-first culture across the enterprise
• Build and develop diverse, high-performing teams and future leaders
• Act as a change…