Job Overview
As a Chief Product Security Strategist, you will play a critical role in defining and guiding the security strategy for our product lineup. This is an opportunity to instill a culture that prioritizes security, ensuring our products meet the highest cybersecurity and regulatory standards.
Key Responsibilities
* Lead and cultivate a high-performing product security team that supports various products within the business unit.
* Boost team efficiency to minimize security risk and strengthen product resilience within the portfolio, while ensuring alignment with the company's cybersecurity strategy and regulatory standards.
* Nurture a culture of accountability, ingenuity, and continuous improvement to drive tangible outcomes.
* Foster risk reduction and elevate security measures within the product portfolio by incorporating secure-by-design principles, threat modeling, and proactive vulnerability management.
* Collaborate with R&D, Quality, Regulatory, and IT teams across functions to embed security throughout the product lifecycle from inception to post-market.
* Translate cybersecurity strategy into practical plans, aligning team efforts with the company's enterprise security objectives, regulatory demands, and customer expectations.
* Track and report security status, using metrics and benchmarks to showcase progress, identify weaknesses, and inform decision-making.
* Instruct engineering teams on comprehending security requirements and identifying practical solutions for incorporating them into new and existing products.
* Deploy software security solutions and plan/develop products following recognized industry norms for medical device security, encompassing encryption, disaster recovery, authentication, audit logging, hardening measures, patch management, and vulnerability monitoring.
* Conduct product security risk evaluations, hazard assessments, and offer guidance on vulnerability remediation to software engineers in product development, both on-site and off-site.
* Assist in the product security documentation process, including offering standardized product security documentation, employing document management systems, coordinating and assisting in document review and approval processes, and ensuring all tasks are completed promptly and meet necessary quality standards.
Requirements
* Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other related engineering fields or equivalent work experience required.
* Minimum of 5 years of experience in IT-security architecture, secure software development, systems & architecture concepts, and designs.
* Experience leading and managing a team.
* Working experience with various encryption algorithms and PKI solutions.
* Understanding of security issues and solutions for embedded devices.
* Experience with dynamic and static code analysis tools.
* Proficient knowledge of networking and associated security elements and prevalent threats.
* Demonstrated understanding of developing in a regulated environment and adhering to a quality management system.
* Excellent written and verbal communication and interpersonal skills are essential.
* Demonstrated positive work ethic with a strong commitment to achieving project goals.
* Proficient knowledge of Microsoft Office applications and tools.
Benefits
* Opportunity to work with a top healthcare company.
* Chance to lead and manage a product security team.
* Autonomy to develop and implement security strategies.
* Collaborative work environment.
* Professional growth and development opportunities.
* Competitive salary and benefits package.