Director of Product Security

Overview

Want more jobs like this?

Get jobs in Bedford, MA delivered to your inbox every week.

Get Jobs

Send me The Muse newsletters for the best in career advice and job search tips.

By signing up, you agree to our Terms of Service & Privacy Policy.

Responsibilities

• Responsible for leading cross functional team members to complete all aspects of product cyber security and privacy initiatives.
• Responsible for secure software development for all Werfen on-market and pre-market products.
• Represent cyber security within product development teams to ensure cyber security is being designed into products.
• Responsible for cyber security threat management.  Complete continuous technical analysis and monitoring for cyber security signals.
• Responsible for customer assurance.  Manage key interface contacts with customers.  May include completion of security inquiries, intake of vulnerability reports, provide consistent guidance to staff and customers.
• Responsible for governance, risk and compliance of Werfen processes.  Establish product security policy and governance, documentation of process for all domains.  Conform compliance to existing industry policies and guidelines.

• Responsible for leading cross functional team members to complete all aspects of product cyber security and privacy initiatives.
• Responsible for secure software development for all Werfen on-market and pre-market products.
• Represent cyber security within product development teams to ensure cyber security is being designed into products.
• Responsible for cyber security threat management. Complete continuous technical analysis and monitoring for cyber security signals.
• Responsible for customer assurance. Manage key interface contacts with customers. May include completion of security inquiries, intake of vulnerability reports, provide consistent guidance to staff and customers.
• Responsible for governance, risk and compliance of Werfen processes. Establish product security policy and governance, documentation of process for all domains. Conform compliance to existing industry policies and guidelines.

• Supervises and coordinates technical aspects with the different team technical leads.
  
• Other internal interfaces TBD based on departmental needs.

Qualifications

• Education: Requires Bachelor’s degree in Computer Science, Computer Engineering or the equivalent combination of related training, proficiency and experience.  MBA or Master’s degree preferred.
• Experience:
  • Minimum of 8 years of experience leading product cyber security teams and projects and risk management activities - in medical device or healthcare domain.
  • Cyber security training and certification such as CISSP/CISM.
  • Experience in cross-functional cyber security activities including intrusion detection, security tools and technology, regulation compliance, audit/control processes and customer assurance.
  • Experience in incident handling and response.
  • Experience in writing policy and managing compliance.
  • Experience in designing software development products using SDLC (e.g.:  Agile, DevOps) 

• Familiar with laws and regulations on cyber security, privacy, data protection and breach notification (e.g.:  FDA cyber security guidelines, 95/46/ED, HIPPA, GDPR, ISO/TS 14265, 21CFR820, SB1386, etc.)
• Understanding of Windows and Linux operating systems and networking preferred.
• Domain specific standards and approaches on privacy and product security (e.g.:  HL7, ASTM, POCT-1A) preferred.
• Language: English
• Leadership, Managing Vision and Purpose, Developing Direct Reports and others (e.g.:  holds people accountable, teamwork, delegation, communication, impact and influencing, etc.), Time Management, Project Management, Oral and Written Communications.