Lead System Designer & Product Security Representative

We are seeking a Lead System Designer / Product Security Representative (LSD/PSR) to lead compliance quality and security governance for Ethos Design System (EDS) by ensuring all components meet QMS regulatory and secure development requirements throughout their lifecycle.

This role ensures that components are designed developed verified released and maintained in accordance with Quality Management System (QMS) requirements Secure Development Lifecycle (SDL) practices regulatory expectations and enterprise security standards. You will serve as the primary compliance steward for EDS partnering with Product Management UX Engineering Architecture and Product Security teams to maintain audit readiness security posture documentation completeness and release compliance. This includes complete ownership of QMS documentation review coordination approvals and process compliance activities.

About the Ethos Design System (EDS)

EDS is the unified digital platform that powers GE HealthCares global software portfolio. It serves as a comprehensive library of reusable UI components design patterns and accessibility standards that bridge the critical gap between User Experience (UX) and Engineering. By fostering a philosophy of reduce reuse and recycle EDS enables hundreds of product teams to eliminate redundant coding and design work. We provide the foundational building blocks that ensure our clinical and operational applications are intuitive consistent and accessible allowing teams to focus on patient safety.

The Mission: Scale and Empowerment

We are in a phase of hyper-growth scaling from 25 adopting products to over 100. This requires a leader who thinks like a founder. You must look beyond simple backlog management to think about scale growth and empowerment. You will build a self-service ecosystem that allows teams to move fast without breaking the consistent standards required for patient safety and accessibility.

Core Responsibilities

1. Quality & Compliance

• QMS Ownership: Own QMS-related activities across the EDS component lifecycle. Set and own the program Design History File (DHF) strategy.

• Documentation & Traceability: Develop maintain and govern required design development verification and release documentation. Ensure traceability between requirements design artifacts implementation verification and releases.

• Audit Readiness: Coordinate reviews approvals and signoffs for quality records. Support audits assessments and inspection of readiness activities while maintaining compliance with organizational development processes and regulatory requirements.

• Continuous Improvement: Drive continuous improvement of quality processes templates and workflows. Ensure component Technical Design Reviews (cTDR/dTDR/eTDR) align with program plans and needs.

2. Product Security & Secure Development

• Security Governance: Serve as the Product Security Representative for EDS ensuring adherence to Secure Development Lifecycle requirements.

• Risk Management: Coordinate security reviews threat modeling and security risk assessments. Track remediation of vulnerabilities security findings and compliance gaps.

• Release Validation: Ensure security controls evidence and documentation are completed before releases.

• Engineering Partnership: Partner with engineering teams to implement secure coding and dependency management practices. Coordinate penetration testing security scans SBOM generation and vulnerability management activities. Track security metrics remediation SLAs and compliance status across components.

3. Governance & Program Oversight

• Release Readiness: Establish release readiness checklists covering quality and security requirements. Maintain audit-ready records and ensure documentation integrity.

• Strategic Liaison: Act as the primary liaison between EDS teams Quality Regulatory and Product Security organizations. Collaborate with Product Architecture UX and Engineering to identify compliance risks and mitigation plans.

• Automation: Drive automation of QMS and security compliance processes where practical. Monitor compliance with KPIs and provide status reporting to leadership.

Qualifications

• Experience: 10 years of experience with Quality Management Systems (QMS) and regulated product development.

  • Mandatory: Strong understanding of Secure Development Lifecycle practices.

  • Mandatory: Experience coordinating security reviews threat modeling vulnerability management and compliance activities.

• Domain Knowledge: Familiarity with design controls traceability audit readiness and release governance.

• Process & Methodology: Experience in Agile Software Development including associated concepts tools and practices. Ability to drive process improvements and compliance automation initiatives.

• AI Tooling: Experience using AI tools is a must to enhance workflows optimize compliance checks or assist in documentation generation.

• Leadership Skills: Strong cross-functional leadership stakeholder management and program coordination skills.

• Education: Bachelors degree in Computer Science Engineering or related field.

Inclusion and Diversity:

GE Healthcare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race colour religion national or ethnic origin sex sexual orientation gender identity or expression age disability protected veteran status or other characteristics protected by law.

We expect all employees to live and breathe our behaviours: to act with humility and build trust; lead with transparency; deliver with focus and drive ownership always with unyielding integrity.

Our total rewards are designed to unlock your ambition by giving you the boost and flexibility you need to turn your ideas into world-changing realities. Our salary and benefits are everything youd expect from an organization with global strength and scale and youll be surrounded by career opportunities in a culture that fosters care collaboration and support.

#Everyroleisvital

#LI-MP2