Director, AI Security

  Strategy & Leadership – Define and lead the enterprise AI security strategy, operating model, governance, and roadmap while overseeing the function's performance, resources, and capabilities.

  Enterprise Security Architecture – Extend and align enterprise security architecture and standards to AI technologies, ensuring appropriate controls, risk management, and integration with broader security frameworks.

  AI Security Architecture, Engineering & Operations – Establish and manage AI security controls, architectures, and operational practices across AI platforms, applications, agents, and supporting technologies, ensuring secure development, deployment, and monitoring.

  Cyber-Physical & Connected Device Security – Partner with product and technology teams to secure AI-enabled and connected systems, applying appropriate safeguards, risk management practices, and regulatory considerations.

  Governance & Frameworks – Lead AI security governance, risk oversight, and compliance activities, ensuring alignment with applicable security, privacy, regulatory, and industry frameworks.

• Your First 12 Months

• Enterprise AI security strategy, governance, and operating model established.

• AI inventory, reference architecture, and detection capabilities established — AI and AI-agent inventory with an agent identity and authorization standard; secure GenAI/RAG and MCP/tool reference architecture integrated with the ARB; AI threat-modeling methodology, red-team program, and vendor/model assessment process; and AI Detection & Response capability with incident-response playbooks.

• Joint operating model with Product Security for AI touching connected devices; executive metrics and risk reporting in place.

• Enterprise security reference architecture extended to AI platforms, agents, and model services (identity fabric, Zero Trust segmentation, dataflow and trust-boundary standards), integrated with the ARB and enterprise risk register.

• Cyber-Physical Systems (CPS) and connected-device security controls established for AI embedded in or interfacing with Omnicell pharmacy automation, including IEC 62443/Purdue-aligned segmentation and fail-safe/human-approval requirements for device- and medication-affecting decisions.

Success is measured by coverage (AI systems and agents inventoried, uniquely identified, and reviewed pre-production), red-team coverage, remediation and detection/containment times, and reduction of unauthorized AI use.

Who You Are

Minimum qualifications

• 15+ years of progressive experience in cybersecurity, security architecture, engineering, or technology risk; 5+ years leading enterprise security architecture, engineering, product, cloud, application, or AI security capabilities.

• Experience operating within a formal enterprise security architecture practice (ARB participation, reference architecture ownership; SABSA/TOGAF or equivalent), designing controls that span identity, network, data, and application layers across hybrid and multi-cloud estates.

• Strong knowledge of GenAI, LLMs, agentic AI, RAG, and vector databases, with the ability to translate AI risk into practical architecture and technical controls.

• Deep understanding of IAM, privileged access, Zero Trust, cloud, application/API security, threat modeling, and security operations.

• Experience in healthcare, medical device, or another highly regulated environment, with strong executive communication and cross-functional influence Physical Systems (CPS) & Connected Device Security -OT, ICS, IoMT, or connected medical device environments, or partnering closely with product security in a device manufacturer, healthcare delivery, or comparable cyber-physical context.

• Working knowledge of IEC 62443, NIST SP 800-82, FDA premarket/postmarket cybersecurity guidance, and clinical network segmentation practices; GICSP or equivalent OT credential is a plus.

Preferred qualifications

• Bachelor's or master's degree in a related field, or equivalent practical experience; CISSP, CCSP, CISM, SABSA, TOGAF, cloud security certifications, IAPP AIGP, or GICSP (OT) a plus.

• Experience securing production Enterprise platforms (OI/IoMT, AI, Azure, OpenAI, Copilot, Bedrock, Vertex AI, Anthropic, Databricks, LangChain, MCP) and AI security capabilities (gateways, posture management, red teaming, model scanning, non-human identity).

• Experience securing OT, ICS, IoMT, or connected medical device environments, including IEC 62443, NIST SP 800-82, FDA cybersecurity guidance, and clinical network segmentation.

• Familiarity with OWASP LLM guidance and MITRE ATLAS; experience building AI inventories, agent registries, or AI incident-response programs.

   

  How You’ll Elevate at Omnicell

  Success here is about how you achieve it, guided by our Elevate Behaviors and Leadership Imperatives: Collaborate across Security, Engineering, Data, Privacy, Legal, and Quality/Regulatory; Inspire secure and responsible AI adoption; Develop talent and organizational capability; Execute with disciplined follow-through; and make an Impact by enabling innovation while reducing enterprise, regulatory, and patient-safety risk — modeling a growth mindset, activating talent, and championing change as AI and its regulation evolve.

  Work Conditions, Compensation & EEO

  Flexibility in working hours for critical security decisions and incidents; frequent collaboration across time zones; approximately 15–20% travel. Primarily computer-based work; reasonable accommodations provided consistent with applicable law.

  The good-faith base salary range for this position is $213,196.95 – $236885.50, plus annual bonus and equity eligibility; actual pay depends on skills, experience, and location. Omnicell offers comprehensive benefits including medical, dental, vision, 401(k) match, and paid time off. [HR: insert approved range before posting.]

  Omnicell is an equal opportunity employer. All qualified applicants will receive consideration without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other legally protected characteristic. If you require reasonable accommodation to apply for an interview, please contact Omnicell Talent Acquisition. Employment is contingent upon successful completion of a background check in accordance with applicable law.