Policy and Compliance Lead

Policy and Compliance Lead at Danaher Corporation

At Danaher, our work saves lives, and each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life. Our 63,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology. Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we're committed to hiring and developing from within. You'll thrive in a culture of belonging where you and your unique viewpoint matter. Learn about the Danaher Business System which makes everything possible.

The Policy and Compliance Lead is responsible for developing and implementing Policies and Standards that align with industry requirements. This role offers opportunities to work on cutting-edge security projects and grow your expertise in both business strategy and information security. This position is part of Corporate Information Security and will be USA Remote based.

In This Role, You Will Have The Opportunity To

• Design, develop, and maintain comprehensive information security policies, standards, and procedures that align with regulatory requirements, industry frameworks (such as ISO 27001, NIST, SOC 2), and organizational objectives.
• Lead compliance initiatives and assessments, coordinating with cross-functional teams to ensure adherence to applicable laws, regulations, and contractual obligations while identifying and remediating gaps.
• Serve as a subject matter expert and trusted advisor to business units, providing guidance on policy interpretation, risk mitigation strategies, and security best practices.
• Drive continuous improvement of the policy management lifecycle, including stakeholder engagement, policy reviews, exception management, and metrics reporting to leadership.
• Collaborate with audit, legal, risk management, and technology teams to translate complex compliance requirements into practical, scalable solutions that support business growth.

The Essential Requirements Of The Job Include

• Strong knowledge of regulatory frameworks and industry standards such as ISO 27001, NIST CSF, SOC 2, GDPR, HIPAA, or PCI DSS.
• Demonstrated ability to translate complex technical and regulatory requirements into clear, actionable policies and procedures for diverse audiences.
• Proven experience in preparing for and managing IT security audits (e.g., SOC 2, ISO 27001, PCI DSS).
• Strong knowledge of compliance frameworks and ability to translate requirements into actionable controls.
• 3+ years of experience in information security, risk management, compliance, or policy development within a corporate environment.

It would be a plus if you also possess previous experience in:

• Experience with governance, risk, and compliance (GRC) platforms and policy management tools, along with security automation and continuous compliance monitoring.
• Excellent written and verbal communication skills with proven experience influencing stakeholders at all organizational levels, including senior leadership.

At Danaher we believe in designing a better, more sustainable workforce. We recognize the benefits of flexible, remote working arrangements for eligible roles and are committed to providing enriching careers, no matter the work arrangement. This position is eligible for a remote work arrangement in which you can work remotely from your home. The salary range for this role is $130K-$160K, and it is also eligible for bonus/incentive pay. We offer a comprehensive package of benefits including paid time off, medical/dental/vision insurance and 401(k) to eligible employees. Join our winning team today. Together, we'll accelerate the real-life impact of tomorrow's science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

Key skills/competency

• ISO 27001
• NIST CSF
• SOC 2
• GDPR
• HIPAA
• PCI DSS
• Risk Management
• Compliance
• Information Security
• Policy Development