Specialist, Information Security

ResMed Inc; Canada; On-site; CAD 110,000 - 150,000; Full time

Job summary

ResMed Inc is seeking an Information Security Specialist to protect global information assets, technology platforms, and operations. You will lead security risk assessments across cloud and hybrid environments, evaluate third-party products, and oversee AI/ML security reviews while guiding secure design practices.

You will partner with project managers, architects, and developers to integrate security throughout the SDLC, communicating risks and remediation plans to business leaders and ensuring

Qualifications

• Proven ability to independently lead security risk assessments across various technologies.
• Experience with third-party security risk management processes and platforms.
• Deep understanding of authentication, encryption, application and network security.

Responsibilities

• Lead security engagements across global projects and align with business and technical objectives.
• Perform end-to-end security risk assessments for cloud-native and hybrid environments.
• Evaluate third-party products and services for security and compliance requirements.
• Lead security reviews of AI/ML-enabled products and mitigate risks.
• Collaborate with PMs, AEs, architects and developers to embed security in SDLC.
• Communicate risks and remediation plans in business terms.
• Produce risk assessments and security summaries with remediation guidance.
• Track risks and controls using GRC tools and maintain traceability.
• Stay current on threats and best practices and contribute to security frameworks.

Skills

Security risk assessments

Third-party risk mgmt

Authentication & auth

Encryption

App & network security

DLP

Cloud security

ZTNA

Logging & monitoring

Vulnerability mgmt

Education

Bachelor's degree

Tools

CSPM

CASB

PAM

ISO 27001

Job description

The Information Technology (IT) team plays a key role in providing business enablement throughout ResMed. We are focused on application, infrastructure, and user productivity solutions, with innovation, efficiency and security. Our goal is providing customer oriented agile delivery, effective business partnership and state-of-the-art technology solutions. Shape the future of secure innovation at global scale. As an Information Security Specialist, you will play a critical role in protecting Resmed’s information assets, technology platforms, and business operations. Working within the Enterprise Security Group, you’ll lead security risk assessments across cloud environments, third-party solutions, and AI/ML-enabled products, helping teams make informed decisions while enabling innovation. Your expertise will guide secure design practices, strengthen risk management, and support compliance and audit readiness across a global organization. This is an opportunity to influence how security is embedded into technology initiatives, collaborate with stakeholders around the world, and make a meaningful impact on the systems and solutions that support Resmed’s mission.

What You'll Do

• Lead security engagement across global projects, aligning security practices with business and technical objectives.
• Conduct end-to-end security risk assessments for cloud-native and hybrid environments, including architecture and control reviews.
• Evaluate third-party products and services during onboarding and integration to ensure security and compliance requirements are met.
• Lead security reviews of AI/ML-enabled products, focusing on secure design, guardrails, and risk mitigation.
• Partner with project managers, product owners, architects, and developers to integrate security throughout the software development lifecycle.
• Communicate security risks, recommendations, and mitigation plans in a clear, business-relevant manner.
• Produce and maintain risk assessments, security summaries, remediation recommendations, and related documentation.
• Track risks and controls using GRC tools to ensure accountability and traceability.
• Stay current on emerging technologies, security threats, and industry best practices.
• Contribute to the continuous improvement of security frameworks, processes, and standards across the organization.

What You're Going to Bring

• Proven ability to independently lead security risk assessments across a variety of technologies and environments.
• Experience with third-party security risk management processes and platforms.
• Strong understanding of:
  • Authentication and authorization
  • Encryption
  • Application and network security
  • Data Loss Prevention (DLP)
  • Endpoint protection
  • Cloud Security Posture Management (CSPM)
  • Cloud Access Security Broker (CASB)
  • Privileged Access Management (PAM)
  • Zero Trust Network Access (ZTNA)
  • Logging and monitoring
  • Vulnerability management
  • Incident response
• Nice to Have:
  • Bachelor's degree.
  • 5+ years of related information security experience.
  • Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
  • Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
  • Knowledge of AWS cloud security controls.
  • Experience within healthcare or manufacturing environments.

What Sets You Apart

• Strategic Thinker: You balance security requirements with business objectives and help teams make informed decisions.
• Influential Communicator: You translate complex security concepts into practical guidance that resonates with technical and non-technical audiences.
• Collaborative Partner: You build strong relationships across functions, cultures, and time zones to drive successful outcomes.
• Proactive Problem Solver: You identify risks early, assess impacts thoughtfully, and develop practical recommendations.
• Continuous Learner: You stay curious about emerging technologies, evolving threats, and new approaches to security.
• Ownership Mindset: You take accountability for delivering high-quality work and following through on commitments.

Why Join Resmed

Joining Resmed is more than helping to create a healthier world. It’s an opportunity to be part of a global organization where innovation, collaboration, and excellence come together to drive meaningful impact. You’ll work alongside talented teams, contribute to securing cutting-edge technologies, and help shape how security enables business success. We are committed to fostering a diverse and inclusive culture where every individual can thrive, bring their authentic self to work, and contribute new ideas. At Resmed, you’ll find a challenging, supportive, and inspiring environment where you can grow your career while helping make a difference. Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals, but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates.

Resmed (NYSE:RMD, ASX: RMD) creates life-changing health technologies that people love. We’re relentlessly committed to pioneering innovative technology to empower millions of people in more than 140 countries to live happier, healthier lives. Our AI-powered digital health solutions, cloud-connected devices and intelligent software make home healthcare more personalized, accessible and effective. Ultimately, Resmed envisions a world where every person can achieve their full potential through better sleep and breathing, with care delivered in their own home. Learn more about how we’re redefining sleep health at Resmed.com and follow @Resmed.