Director, Enterprise Vulnerability & Exposure Management (Kraków on-site OR Poland - remote)

Bring more to life.

At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life. 

Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.  

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter. 

Learn about the Danaher Business System which makes everything possible.

At Danaher, the Director, Enterprise Vulnerability & Exposure Management operationalizes and drives Danaher’s global vulnerability & exposure management (CTEM) program. Enterprise strategy is set by security/business leadership; the Global Lead shapes and refines that strategy, then owns turning it into a working, sustainable capability — governance, risk-based prioritization, validation, metrics, and executive reporting.  The Global Lead works independently and mobilizes remediation owners across infrastructure, cloud, app, and third-party teams that each own their own environment and priorities.

This position reports to the Danaher Global Chief Information Security Officer

and is part of the Danaher Information Security located in Krakow, Poland and will be an on-site role. 

A remote work option is also available in Poland.

This is a Danaher Corporate role, hosted by our Cytiva operating company in Kraków.

In this role, you will have the opportunity to:

• Architect the CTEM operating model: define/scope, discover, prioritize, validate, and mobilize remediation across the enterprise attack surface.

• Design prioritization logic combining asset criticality, exploitability (EPSS/KEV), exposure path, controls, and business impact — beyond raw CVSS.

• Set the integration blueprint across VM, ASM, cloud posture, red team / offensive testing, and remediation/ticketing tools.

• Design the sustainability & governance model: remediation SLAs, exception governance, service ownership, and metrics framework.

The essential requirements of the job include:

• 14+ years of cybersecurity experience with a focus on vulnerability, exposure, or threat exposure management (GCRF P5 Bachelor’s-track minimum; recommended, pending Comp sign-off).

• Experience leading enterprise or global vulnerability/exposure management or CTEM strategy, governance, and remediation across multiple business units.

• Experience with enterprise vulnerability/exposure platforms (such as Tenable, Qualys, Rapid7, Wiz, or Defender) and risk-based prioritization using threat intelligence and asset context.

• Experience working independently to mobilize remediation across infrastructure, cloud, application, and third-party owners and reporting exposure risk to executive stakeholders.

It would be a plus if you also possess previous experience in:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.

• Experience integrating VM with attack surface management and cloud security posture.

• CISSP, CISM, or CRISC.

#LI-KK1

Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology. We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.

For more information, visit www.danaher.com.