Joe Champlin

About Joe Champlin

I am a cybersecurity executive with deep experience leading global product security and enterprise cyber risk programs for a Fortune 100 organization operating at massive scale.I currently serve as Senior Director of Product Security at Thermo Fisher Scientific, where I lead a 60-person global organization responsible for securing digital products spanning medical devices, embedded systems, scientific instruments, SaaS platforms, and AI-enabled solutions. Our work supports a $43B enterprise operating in more than 50 countries and highly regulated environments.My focus is on secure-by-design and secure-in-use outcomes, translating cybersecurity into a business enabler rather than a blocker. I partner closely with executive leadership, regulatory affairs, legal, and product teams to embed security into product lifecycles while meeting evolving global regulations such as FDA premarket/postmarket cybersecurity, FedRAMP, NIST, GDPR, and emerging EU CRA requirements.I routinely contribute to Board and Audit Committee–level cybersecurity materials, supporting the CISO with clear, risk-based insights that connect technical realities to business impact. I manage $5–10M in annual budget, make build-versus-buy decisions, and regularly rationalize vendors to improve both risk posture and cost efficiency.My background spans incident response leadership, global SOC operations, PSIRT ownership, SBOM and supply chain risk, AI security governance, and customer-facing security assurance. I am particularly passionate about developing future leaders and building high-performing teams that scale with the business. I enjoy leading enterprise-wide cybersecurity strategy, executive decision-making, and organizational transformation.

Experience

1. Full-time

   Thermo Fisher Scientific

   Jul 2022 — Present · Frederick, MD, US

   Provide end-to-end services with a focus on improving the cybersecurity posture of products developed by Thermo Fisher. Through a growing, incredibly talented global team focused on flawless execution, this includes:Cultivating meaningful relationships with Product Teams to collaborate and embed security architecture across product families to reduce risk and improve customer satisfaction in our productsProviding a suite of solutions for software developers to write, share and store secure code with static and dynamic code analysis, enterprise code repositories and moreA penetration testing strategy that includes both products as well as the company\'s infrastructure. Testing includes a holistic approach across assets and includes Red Teaming with our Operations Teams.Building, from scratch, a robust vulnerability management program. Including obtaining buy-in, introducing new capabilities and reducing meaningful risk with tracking through real-time dashboards and operational workflows.

Education

• The George Washington University

  BA, International Relations and Affairs

  2009 — 2013

• University of Maryland Global Campus

  Master of Business Administration - MBA, Business Administration and Management, General

  2019 — 2020

Skills

• Management
• International Relations
• Project Planning
• Event Management
• Customer Service
• Government
• Compliance
• Microsoft Office
• Business Strategy
• Microsoft Excel
• Powerpoint
• Consultants
• Research
• Leadership
• Training
• Russian Literature
• Program Management
• Foreign Policy
• Event Planning
• Strategic Communications
• Russian Politics