Prioritize vulnerabilities based on severity, exploitability, exposure, product impact, and business/regulatory risk.
Cybersecurity Risk & Impact Assessment
Conduct cybersecurity risk and impact assessments across the product lifecycle, including threats, vulnerabilities, attack paths, and security controls.
Translate technical findings into product, patient/customer, business, and regulatory risk and recommend appropriate mitigation or risk acceptance.
SIEM / SOC & Security Monitoring
Integrate product cybersecurity signals, telemetry, threat intelligence, and vulnerability data into security monitoring.
Define monitoring requirements, detection use cases, alerting, escalation criteria, and opportunities for automated threat detection.
Leadership Communication
Provide timely executive communication on significant incidents, emerging vulnerabilities, cybersecurity risk, and remediation status.
Translate complex technical issues into concise risk assessments, recommendations, decisions, and business impact for senior leadership.
Cross-Functional Collaboration
Collaborate with Engineering, Software/Firmware, Quality, Regulatory, Product Management, Operations, and IT teams.
Drive cybersecurity alignment across product development, deployment, monitoring, post-market surveillance, and lifecycle management.
Continuous Improvement
Develop and mature cybersecurity processes, tools, automation, metrics, and operating models to improve security posture and response effectiveness.
Establish KPIs/KRIs, dashboards, lessons-learned processes, and continuous improvement initiatives across product cybersecurity operations.
Qualifications
Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or related field, with significant cybersecurity experience.
3Years+ experience in product cybersecurity, incident response, vulnerability management, threat intelligence, security operations, and cybersecurity risk management.
Preferred Experience
Experience with Product Security, SIEM/SOC, vulnerability/exposure management, threat modeling, security architecture, and post-market cybersecurity.
Experience with regulated or safety-critical industries and frameworks such as FDA cybersecurity requirements, IEC 81001-5-1, ISO 14971, IEC 62443, or ISO 27001.
Leadership Competencies
Strong cybersecurity leadership, risk-based decision making, executive communication, and cross-functional influence.
Ability to lead through high-pressure incidents, translate technical complexity into business decisions, and drive measurable security improvements.