Bausch Health US, LLC is a global eye health organization with roots spanning over 170 years. The company operates in nearly 100 countries, manages a portfolio of over 400 products, and employs approximately 13,000 people. Its core business covers the full spectrum of eye care: ophthalmic pharmaceuticals, surgical devices and instruments, contact lenses, lens care, and over-the-counter products. For a cybersecurity team, that means protecting a sprawling attack surface that includes regulated pharmaceutical data, medical device software, manufacturing systems, and the global supply chain that connects them.
The threat model here is multi-layered. You're looking at potential vectors across OT/ICS environments in manufacturing, medical device security where firmware and connectivity create unique exposure, and the standard enterprise IT estate of a multinational. Pharmaceutical and healthcare data carry heavy compliance weight - think HIPAA, GDPR, and FDA regulations for connected devices. The organization values integrity and customer focus, which in practice means security isn't just a perimeter play; it's baked into products that people put on or in their bodies.
With a product catalog that spans from contact lenses to surgical instruments, the engineering and security challenges are genuinely diverse. A team operating here would need to think about secure product development for devices, data protection across global patient and customer records, and infrastructure defense across dozens of country-level operations. It's a mature organization with scale - the kind of place where security work has direct, tangible consequences for millions of people and their sight.
