Manager, IT - Product & Operational Technology Security

Manager, IT - Product & Operational Technology Security

Company: Bausch+Lomb Companies Inc.

The Manager, Product & Operational Technology Security supports the execution and day-to-day management of Product and OT Security activities across the organization, implementing established security programs, standards, and controls to protect medical products and manufacturing environments in support of patient safety, regulatory compliance, and operational continuity. Working closely with senior security leadership and cross-functional partners across R&D, Quality, Regulatory Affairs, Manufacturing IT, and Engineering, this role helps operationalize cybersecurity requirements, coordinate risk assessments, and enable secure product development and manufacturing practices.

This position is well suited for a hands‑on security leader who can translate strategy into execution while continuing to expand their scope and impact.

• Support product security activities across the product lifecycle by executing established security processes for design reviews, development, release, and post market support.
• Coordinate and participate in threat modeling, secure architecture reviews, and product security risk assessments in partnership with R&D and Product teams.
• Manage day to day product vulnerability intake, tracking, remediation coordination, and disclosure activities, escalating risks and decisions as needed.
• Support alignment of product cybersecurity documentation and controls with applicable standards and guidance, including IEC 81001-5-1 and FDA cybersecurity expectations.
• Partner with Quality and Regulatory Affairs teams to support cybersecurity inputs for product submissions, audits, and inspections.

• Support OT security activities across manufacturing and R&D environments by implementing and maintaining approved security standards and controls.
• Coordinate OT security assessments and architecture reviews, working with Manufacturing IT and Engineering teams to identify and mitigate risks.
• Assist in implementing OT security controls related to network segmentation, remote access, vendor connectivity, asset visibility, and monitoring.
• Support integration of OT security considerations into plant change management and capital project planning, escalating constraints or risk tradeoffs as needed.

• Act as a primary security point of contact for Product and OT related initiatives, ensuring consistent communication and coordination across stakeholders.
• Translate cybersecurity requirements into practical, implementable guidance for engineering and operations teams.
• Support continuous improvement of security processes, templates, and documentation.
• Directly manage Product Security Engineers or analysts, providing task direction, coaching and performance feedback.
• Support onboarding, training and development of team members to promote consistent and repeatable security practices.
• Coordinate vendor and service provider activities related to Product and OT Security under the direction of senior leadership.

• Bachelor’s degree in Information Security, Computer Science, Engineering or a related field preferred, or equivalent relevant experience in lieu of formal education.
• 6+ years of cybersecurity experience, including experience supporting security activities in regulated or operational environments.
• Working knowledge of product security practices such as threat modeling, secure design reviews, vulnerability management and remediation tracking.
• Experience operating within regulated environments with strong quality, safety or compliance requirements.
• Ability to clearly communicate technical risks and recommendations to both technical and non technical stakeholders.
• Prior experience providing task leadership or managing a small technical team.

• Exposure to OT or industrial environments, including manufacturing, laboratory or R&D systems
• Familiarity with cybersecurity considerations in medical device or regulated product environments
• Experience supporting programs aligned to IEC…