Senior Healthcare Cybersecurity IRC260000

Description

Our client is a global leader in eye care, specializing in the development, manufacturing, and marketing of innovative products for vision correction and surgical treatments. Their portfolio includes a wide range of contact lenses, eye care solutions, and surgical instruments for cataract and retina procedures. Committed to improving lives by enhancing sight, our client serves customers in over 140 countries, focusing on advancing technologies and solutions for eye health.

Requirements

Mandatory requirements:

• Minimum of 5 years of product security experience in the medical device industry either directly for a medical device manufacturer or for a product security services organization providing consultative services to the manufacturer.
• Strong experience working with standards such as ISO 13485, ISO 14971, IEC 62304, NIST 800-30, NIST 800-53, AAMI TIR 57, UL 2900-2-1, IEC 62443.
• Strong understanding of the cybersecurity requirements of international regulations and guidance documents, including FDA Premarket Guidance for Cybersecurity of Medical Devices, MDR, IVDR, etc.
• Background in leveraging industry standard threat modeling and risk management frameworks.
• Background in penetration testing or leading pen testing engagements with third party organizations.
• Practical knowledge of Agile and agile-based methodologies
• Degree in computer science, software engineering, or cybersecurity

Optional:

• Experience advising on or writing cybersecurity SOPs for Quality Management Systems
• Experience with regulatory submission process
• Experience leading cross functional teams to incorporate cybersecurity across product engineering, Quality, Regulatory, IT, and other business functions
• Experience in working with embedded systems, cloud enabled systems, and IoT systems

Job responsibilities

At our client, the cybersecurity team plays a crucial role in protecting sensitive patient and customer data, as well as safeguarding the company’s intellectual property, including proprietary medical technologies. They implement and maintain robust security measures to prevent data breaches, cyberattacks, and vulnerabilities across both product development and operational environments. Additionally, the team ensures compliance with industry standards and regulations related to healthcare data protection, such as HIPAA, securing the company’s digital infrastructure and maintaining resilience against evolving cyber threats.

• Design, implement and govern security solutions architectures for robust healthcare software solutions: cloud platforms, user applications, medical devices and IoMT solutions.
• Support and coordinate security assessments, risk analysis, and threat modeling to identify vulnerabilities and develop proactive mitigation strategies.
• Collaborate with engineering and development teams to integrate security into system designs, software development, and cloud infrastructure by following security-by-design best practices.
• Train delivery staff on risk assessment, threat modeling, security best practices (pre & post market requirements), testing requirements, security monitoring. regulatory requirements, etc.
• Support the definition and enforcement of security policies, standards, best practices and cyber security architecture frameworks across the organization.
• Participate in industry working groups, technical advisory groups in order to monitor the evolving threat landscape, trend development & promote GL Thought Leadership.
• Ensure compliance with relevant industry standards and regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, NIST, IEC 62443, UL 2900-2-1).

What we offer

Culture of caring. At GlobalLogic, we prioritize a culture of caring. Across every region and department, at every level, we consistently put people first. From day one, you’ll experience an inclusive culture of acceptance and belonging, where you’ll have the chance to build meaningful connections with collaborative teammates, supportive managers, and compassionate leaders. 

Learning and development. We are committed to your continuous learning and development. You’ll learn and grow daily in an environment with many opportunities to try new things, sharpen your skills, and advance your career at GlobalLogic. With our Career Navigator tool as just one example, GlobalLogic offers a rich array of programs, training curricula, and hands-on opportunities to grow personally and professionally.

Interesting & meaningful work. GlobalLogic is known for engineering impact for and with clients around the world. As part of our team, you’ll have the chance to work on projects that matter. Each is a unique opportunity to engage your curiosity and creative problem-solving skills as you help clients reimagine what’s possible and bring new solutions to market. In the process, you’ll have the privilege of working on some of the most cutting-edge and impactful solutions shaping the world today.

Balance and flexibility. We believe in the importance of balance and flexibility. With many functional career areas, roles, and work arrangements, you can explore ways of achieving the perfect balance between your work and life. Your life extends beyond the office, and we always do our best to help you integrate and balance the best of work and life, having fun along the way!

High-trust organization. We are a high-trust organization where integrity is key. By joining GlobalLogic, you’re placing your trust in a safe, reliable, and ethical global company. Integrity and trust are a cornerstone of our value proposition to our employees and clients. You will find truthfulness, candor, and integrity in everything we do.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.