Remote Senior Information Security Specialist

B. BRAUN MEDICAL (US) INC; Bethlehem (Northampton County); Remote; USD 135,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Tuition reimbursement

Job summary

B. Braun Medical, Inc. is seeking a Senior Information Security Specialist to lead and evolve our security program across operations and development. You will design and implement security controls, work with global teams, and drive risk management and compliance across our cloud and on‑prem environments.

You will partner with the Head of Security and Technology to embed security into SDLC, support audits, and influence security strategy in a rapidly changing healthcare technology landscape.

Qualifications

• Knowledge of cyber risk management frameworks (NIST, ISO 27001, CIS, HIPAA, HITRUST, GDPR, NIS2).
• Experience with regulatory compliance across global jurisdictions.
• Strong communication skills and ability to report risk to executives.
• Proven track record in cyber risk, policy development, and audit readiness.
• Experience overseeing vendor/third‑party risk management.

Responsibilities

• Provide technical expertise in information security controls, activities, and products.
• Assess and support information security controls, risk, and exposure for infrastructure and processes.
• Ensure secure design principles and SDLC integration with risk-based controls.
• Partner with global teams to implement policies, standards, and governance.
• Drive external audits (SOC 2, HITRUST, HIPAA) and manage evidence in GRC platforms.
• Define KPIs/KRIs and drive quarterly improvements.
• Support cloud security for AWS and Azure environments.
• Collaborate with law and business teams on security controls requirements.

Skills

Cyber risk mgmt

NIST

ISO 27001

HIPAA

HITRUST

GDPR

Regulatory compliance

Vendor risk

Audit readiness

Team leadership

Education

Bachelor's degree

Job description

B. Braun Medical, Inc. is seeking a Senior Information Security Specialist to lead and evolve our security program across operations and development. You will design and implement security controls, work with global teams, and drive risk management and compliance across our cloud and on‑prem environments.

You will partner with the Head of Security and Technology to embed security into SDLC, support audits, and influence security strategy in a rapidly changing healthcare technology landscape.