Cyber Security Manager

Poste

Temps plein

Permanent

Mid

IT & Infrastructure

Modalités

Baar

Hybride

60%

Exigences

Bachelor

Permis UE/AELE

Description

Your responsibilities Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and connected data flows. Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working. Conduct threat modelling, cybersecurity risk assessments, control definition, and residual risk evaluations. Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities. Coordinate vulnerability management, penetration testing, security verification, and remediation activities. Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions. Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.

Responsabilités

Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and connected data flows.
Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working.
Conduct threat modelling, cybersecurity risk assessments, control definition, and residual risk evaluations.
Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities.
Coordinate vulnerability management, penetration testing, security verification, and remediation activities.
Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions.
Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.

Exigences

Degree in Computer Science, Software Engineering, Electrical Engineering, Biomedical Engineering, Cybersecurity, or a related field.
Demonstrated product cybersecurity experience, preferably in medical devices, connected products, embedded systems, mobile apps, cloud services, IoT, or another regulated environment.
Good understanding of product cybersecurity across firmware, apps, cloud and backend services, APIs, connected ecosystems, and data flows.
Hands-on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle, security testing, and post market monitoring.
Knowledge of standards and regulations such as IEC 81001-5-1, IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity guidance, EU MDR, IEC 62443, ISO 27001, and GDPR.
Ability to translate cybersecurity risks into practical engineering requirements, documentation, supplier evidence, and risk-based decisions.
Pragmatic, can-do professional with strong communication skills and the ability to influence stakeholders without direct authority.

Avantages

Joining a global community of colleagues.
Opportunity to develop at an international level.
Witness the direct impact your work has on the company’s success.
Empowered to serve the purpose of advancing human health and wellbeing.

Entreprise

Medela

Medical Devices

Are you interested in working for a company that is passionate about its customers? That lives its values and nurtures its employees? Then Medela is the company for you.