Senior Manager, Cybersecurity Architecture & Engineering

Additional Location(s): US-MN-Arden Hills; US-MA-Marlborough

Diversity - Innovation - Caring - Global Collaboration - Winning Spirit - High Performance

At Boston Scientific, we’ll give you the opportunity to harness all that’s within you by working in teams of diverse and high-performing employees, tackling some of the most important health industry challenges. With access to the latest tools, information and training, we’ll help you in advancing your skills and career. Here, you’ll be supported in progressing – whatever your ambitions.           

About the role: 

Boston Scientific is seeking a c the CISO organization. This role reports directly to the Director of Cybersecurity Architecture and Engineering. The Senior Manager will lead a high-performing organization of cybersecurity architects, engineers, analysts, and technical specialists responsible for driving enterprise cybersecurity architecture, engineering, and strategic security initiatives across AI, Data, Application, and Cloud Security domains.

This leader will be responsible for defining and executing the cybersecurity architecture and engineering strategy, leading major cross-functional security transformation programs, and partnering closely with Enterprise Architecture, Digital, Infrastructure, Application Development, Data & AI, and business leaders to embed security into enterprise technology initiatives. Responsibilities include organizational leadership, financial management, strategic planning, vendor management, governance, and people development across the Architecture & Engineering organization.

The individual in this role is expected to serve as a collaborative leader and trusted advisor, building strong relationships across the enterprise while developing innovative security strategies that enable business growth and digital transformation. This role will drive execution of complex, global cybersecurity initiatives, ensuring high-quality technical solutions, operational excellence, and alignment with business priorities and cybersecurity strategy.

This hybrid opportunity requires approximately three days per week onsite at our Arden Hills, MN, or Marlborough, MA offices.

Your responsibilities include:

• Lead and manage globally distributed teams of cybersecurity architects, engineers, and technical specialists responsible for Cybersecurity Architecture and Engineering.
• Provide technical and organizational leadership for enterprise security architecture across AI Security, Data Security, Application Security, Cloud Security, Identity and Access Management, Network Security, and Infrastructure Security.
• Lead strategic, enterprise-wide cybersecurity programs supporting digital transformation initiatives, including AI adoption, cloud modernization, application modernization, and enterprise data platforms.
• Develop and execute the Cybersecurity Architecture & Engineering strategy, roadmap, and multi-year technology investment plans aligned with business and security objectives.
• Establish architecture standards, engineering practices, security patterns, and reference architectures that enable secure-by-design principles across enterprise technology platforms.
• Partner with Enterprise Architecture, Digital Enablement, Infrastructure, Application Development, Data & Analytics, AI teams, and business stakeholders to integrate cybersecurity throughout the technology lifecycle.
• Lead Architecture Assurance activities including Security by Design, Threat Modeling, Architecture Reviews, Technical Review Boards (TRBs), and secure solution design.
• Provide project and program leadership for ongoing and future cybersecurity initiatives supporting enterprise priorities.
• Oversee engineering and lifecycle management of enterprise cybersecurity technologies, including Cloud Security, Identity and Access Management, Application Security, Data Protection, Network Security, Zero Trust, Secure Access Service Edge (SASE), Encryption, and Data Loss Prevention (DLP).
• Drive innovation by evaluating emerging technologies and cybersecurity capabilities, particularly within AI Security, Cloud Security, Data Security, and Application Security.
• Develop and maintain strategic cybersecurity roadmaps and support annual cybersecurity strategy development and Annual Operating Plan (AOP) submissions.
• Manage vendor relationships, strategic partnerships, support agreements, and technology investments within areas of responsibility.
• Manage organizational budgets including personnel (BSC and consultants), technology investments, maintenance, travel, education, and operational expenditures.
• Establish governance, metrics, and key performance indicators (KPIs) to measure the effectiveness and maturity of cybersecurity architecture and engineering capabilities.
• Mentor, coach, and develop managers, architects, engineers, and technical leaders while fostering a collaborative, innovative, and high-performing engineering culture.
• Foster a diverse and inclusive workplace that enables team members to contribute to their full potential while supporting organizational objectives.
• Ensure compliance with company policies, regulatory requirements, and industry security standards.

Required qualifications:

• Bachelor’s degree in Security or IT related field
• A minimum of 12+ years of experience in IT industry 
• A minimum of 5+ years of strong people and project management experience 
• A minimum of 3+ years of strong experience of working knowledge in cybersecurity domains like IAM, Data security, Encryption, and Application security
• Knowledge of good industry practice in tiered security architecture design
• Strong analytical skills for interpreting business requirements and translating them into technical specifications 
• Strong communication skills, including the ability to write security documentation, standards, and guidelines 
• Understanding architectural implications of meeting industry standards such as PCI DSS, ISO 27001, HIPAA, and NIST/DoD frameworks

Preferred qualifications:

• MBA or other advanced degree.
• Experience with multi-tier architectures and frameworks such as, TOGAF, NIST 207 - Zero Trust 
• Professional certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, CCSK, AWS Security Specialty, Azure Security Engineer, or equivalent.
• Experience within regulated industries such as healthcare, medical devices, pharmaceuticals, or life sciences.
• Demonstrated ability to influence executive leadership and drive enterprise-wide security transformation initiatives.
• Strong strategic thinking, organizational leadership, and people development skills with a passion for building high-performing engineering organizations

Requisition ID: 630907 

Minimum Salary: $ 119800 

Maximum Salary: $ 227600 

The anticipated compensation listed above and the value of core and optional employee benefits offered by Boston Scientific (BSC) – see www.bscbenefitsconnect.com—will vary based on actual location of the position and other pertinent factors considered in determining actual compensation for the role. Compensation will be commensurate with demonstrable level of experience and training, pertinent education including licensure and certifications, among other relevant business or organizational needs. At BSC, it is not typical for an individual to be hired near the bottom or top of the anticipated salary range listed above.

Compensation for non-exempt (hourly), non-sales roles may also include variable compensation from time to time (e.g., any overtime and shift differential) and annual bonus target (subject to plan eligibility and other requirements).

Compensation for exempt, non-sales roles may also include variable compensation, i.e., annual bonus target and long-term incentives (subject to plan eligibility and other requirements).

For MA positions: It is unlawful to require or administer a lie detector test for employment. Violators are subject to criminal penalties and civil liability.

Boston Scientific transforms lives through innovative medical technologies that improve the health of patients around the world. As a global medical technology leader for more than 45 years, we advance science for life by providing a broad range of high-performance solutions that address unmet patient needs and reduce the cost of healthcare. Our portfolio of devices and therapies helps physicians diagnose and treat complex cardiovascular, respiratory, digestive, oncological, neurological and urological diseases and conditions. Learn more at www.bostonscientific.com and follow us on LinkedIn.

Boston Scientific Corporation has been and will continue to be an equal opportunity employer. To ensure full implementation of its equal employment policy, the Company will continue to take steps to assure that recruitment, hiring, assignment, promotion, compensation, and all other personnel decisions are made and administered without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, gender expression, veteran status, age, mental or physical disability, genetic information or any other protected class.

Please be advised that certain US based positions, including without limitation field sales and service positions that call on hospitals and/or health care centers, require acceptable proof of COVID-19 vaccination status.  Candidates will be notified during the interview and selection process if the role(s) for which they have applied require proof of vaccination as a condition of employment.  Boston Scientific continues to evaluate its policies and protocols regarding the COVID-19 vaccine and will comply with all applicable state and federal law and healthcare credentialing requirements.   As employees of the Company, you will be expected to meet the ongoing requirements for your roles, including any new requirements, should the Company’s policies or protocols change with regard to COVID-19 vaccination.

Among other requirements, Boston Scientific maintains specific prohibited substance test requirements for safety-sensitive positions.  This role is deemed safety-sensitive and, as such, candidates will be subject to a prohibited substance test as a requirement.  The goal of the prohibited substance testing is to increase workplace safety in compliance with the applicable law.