Lead System Designer & Product Security Representative

gehc; Karnataka; Hybrid; INR 3,500,000 - 5,500,000; Full time

Job summary

GE HealthCare's Ethos Design System (EDS) seeks a Lead System Designer / Product Security Representative to own QMS, SDL, and release compliance across the component lifecycle. You will partner with Product Management, UX, Engineering, Architecture, and Product Security to maintain audit readiness, strengthen security posture, and ensure complete, traceable documentation.

This role guides quality governance during hyper-growth from 25 to 100+ adopting products and drives scalable, automated

Qualifications

• Experience: 10+ years of experience with Quality Management Systems (QMS) and regulated product development.
• Mandatory: Strong understanding of Secure Development Lifecycle practices.
• Mandatory: Experience coordinating security reviews, threat modeling, vulnerability management, and compliance activities.
• Domain Knowledge: Familiarity with design controls, traceability, audit readiness, and release governance.
• Process & Methodology: Experience in Agile Software Development, including associated concepts, tools, and practices. Ability to drive process improvements and compliance automation initiatives.
• AI Tooling: Experience using AI tools is a must to enhance workflows, optimize compliance checks, or assist in d

Responsibilities

• Quality & Compliance: Own QMS-related activities across the EDS component lifecycle and design history file strategy.
• Documentation & Traceability: Develop, maintain, and govern required design, development, verification, and release documentation with traceability.
• Audit Readiness: Coordinate reviews, approvals, and signoffs for quality records and support audits.
• Continuous Improvement: Drive improvement of quality templates and workflows; ensure cTDR/dTDR/eTDR alignment.
• Security Governance: Serve as Product Security Representative for EDS and ensure SDL adherence.
• Risk Management: Coordinate security reviews, threat modeling, vulnerability management, and remediation tracking.
• Release Validation: Ensure security controls and documentation are completed before releases.
• Engineering Partnership: Collaborate with engineering on secure coding and dependency management; coordinate security tests and SBOMs.
• Automation: Drive automation of QMS and security compliance processes.
• Release Readiness: Establish release readiness checklists covering quality and security requirements.
• Strategic Liaison: Liaise between EDS teams, Quality, Regulatory, and Product Security; identify risks and mitigations.
• KPIs: Monitor compliance KPIs and report status to leadership.

Skills

QMS experience

SDL practices

Security reviews

Threat modeling

Vulnerability management

Agile software development

Automation

AI tooling

Job description

Job Description Summary

We are seeking a Lead System Designer / Product Security Representative (LSD/PSR) to lead compliance, quality, and security governance for Ethos Design System (EDS) by ensuring all components meet QMS, regulatory, and secure development requirements throughout their lifecycle.

This role ensures that components are designed, developed, verified, released, and maintained in accordance with Quality Management System (QMS) requirements, Secure Development Lifecycle (SDL) practices, regulatory expectations, and enterprise security standards. You will serve as the primary compliance steward for EDS, partnering with Product Management, UX, Engineering, Architecture, and Product Security teams to maintain audit readiness, security posture, documentation completeness, and release compliance. This includes complete ownership of QMS documentation, review coordination, approvals, and process compliance activities.

Job Description

About the Ethos Design System (EDS)

EDS is the unified digital platform that powers GE HealthCare's global software portfolio. It serves as a comprehensive library of reusable UI components, design patterns, and accessibility standards that bridge the critical gap between User Experience (UX) and Engineering. By fostering a philosophy of "reduce, reuse, and recycle", EDS enables hundreds of product teams to eliminate redundant coding and design work. We provide the foundational building blocks that ensure our clinical and operational applications are intuitive, consistent, and accessible, allowing teams to focus on patient safety.

The Mission: Scale and Empowerment

We are in a phase of hyper-growth, scaling from 25 adopting products to over 100. This requires a leader who thinks like a founder. You must look beyond simple backlog management to think about scale, growth, and empowerment. You will build a self-service ecosystem that allows teams to move fast without breaking the consistent standards required for patient safety and accessibility.

Core Responsibilities

1. Quality & Compliance
   • QMS Ownership: Own QMS-related activities across the EDS component lifecycle. Set and own the program Design History File (DHF) strategy.
   • Documentation & Traceability: Develop, maintain, and govern required design, development, verification, and release documentation. Ensure traceability between requirements, design artifacts, implementation, verification, and releases.
   • Audit Readiness: Coordinate reviews, approvals, and signoffs for quality records. Support audits, assessments, and inspection of readiness activities while maintaining compliance with organizational development processes and regulatory requirements.
   • Continuous Improvement: Drive continuous improvement of quality processes, templates, and workflows. Ensure component Technical Design Reviews (cTDR/dTDR/eTDR) align with program plans and needs.
2. Product Security & Secure Development
   • Security Governance: Serve as the Product Security Representative for EDS, ensuring adherence to Secure Development Lifecycle requirements.
   • Risk Management: Coordinate security reviews, threat modeling, and security risk assessments. Track remediation of vulnerabilities, security findings, and compliance gaps.
   • Release Validation: Ensure security controls, evidence, and documentation are completed before releases.
   • Engineering Partnership: Partner with engineering teams to implement secure coding and dependency management practices. Coordinate penetration testing, security scans, SBOM generation, and vulnerability management activities. Track security metrics, remediation SLAs, and compliance status across components.
3. Governance & Program Oversight
   • Release Readiness: Establish release readiness checklists covering quality and security requirements. Maintain audit-ready records and ensure documentation integrity.
   • Strategic Liaison: Act as the primary liaison between EDS teams, Quality, Regulatory, and Product Security organizations. Collaborate with Product, Architecture, UX, and Engineering to identify compliance risks and mitigation plans.
   • Automation: Drive automation of QMS and security compliance processes where practical. Monitor compliance with KPIs and provide status reporting to leadership.

Qualifications

• Experience: 10+ years of experience with Quality Management Systems (QMS) and regulated product development.
• Mandatory: Strong understanding of Secure Development Lifecycle practices.
• Mandatory: Experience coordinating security reviews, threat modeling, vulnerability management, and compliance activities.
• Domain Knowledge: Familiarity with design controls, traceability, audit readiness, and release governance.
• Process & Methodology: Experience in Agile Software Development, including associated concepts, tools, and practices. Ability to drive process improvements and compliance automation initiatives.
• AI Tooling: Experience using AI tools is a must to enhance workflows, optimize compliance checks, or assist in d