Cyber Security Manager

Medela Switzerland (HQ); Baar; Hybrid; CHF 150,000 - 190,000; Full time

Job summary

Medela is seeking a Cyber Security Manager to lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services and APIs. The role focuses on defining strategy, governance, and roadmaps while coordinating risk assessments, SBOMs and supplier evidence.

You will drive postmarket monitoring, incident response coordination and continuous process improvement, shaping cybersecurity architecture and requirements for suppliers in a Baar-based hybrid setup.

Qualifications

• Experience with product cybersecurity in medical devices or regulated environments.
• Knowledge of IEC 62304, ISO 14971, GDPR and related standards.
• Ability to translate cybersecurity risks into practical engineering requirements, documentation and risk-based decisions.
• Hands-on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle and post market monitoring.

Responsibilities

• Lead product cybersecurity across devices, apps, cloud, APIs and data flows.
• Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities and ways of working.
• Conduct threat modelling, cybersecurity risk assessments, control definition and residual risk evaluations.
• Represent cybersecurity in architecture reviews, design reviews and supplier discussions.
• Coordinate vulnerability management, penetration testing, security verification and remediation activities.
• Own and maintain cybersecurity documentation, regulatory evidence, SBOMs and technical file contributions.
• Drive postmarket cybersecurity monitoring, incident response coordination and continuous process improvement.
• Own the cybersecurity architecture and design decisions.
• Define the cybersecurity requirements for suppliers and reviewing supplier cyber security evidence and documentation

Skills

Cybersecurity leadership

Threat modelling

Embedded systems

Regulatory compliance

Cross-functional collaboration

Education

Degree in Computer Science / Engineering

Cybersecurity related degree

Job description

Are you interested in working for a company that is passionate about its customers? That lives its values and nurtures its employees? Then Medela is the company for you. We are seeking a Cyber Security Manager to join our R&D team.

Your responsibilities

• Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and connected data flows.
• Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working.
• Conduct threat modelling, cybersecurity risk assessments, control definition, and residual risk evaluations.
• Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities.
• Coordinate vulnerability management, penetration testing, security verification, and remediation activities.
• Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions.
• Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.
• Own the cybersecurity architecture and design decisions.
• Define the cybersecurity requirements for suppliers and reviewing supplier cyber security evidence and documentation

Your profile

• Degree in Computer Science, Software Engineering, Electrical Engineering, Biomedical Engineering, Cybersecurity, or a related field.
• Demonstrated product cybersecurity experience, preferably in medical devices, connected products, embedded systems, mobile apps, cloud services, IoT, or another regulated environment.
• Good understanding of product cybersecurity across firmware, apps, cloud and backend services, APIs, connected ecosystems, and data flows.
• Hands‑on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle, security testing, and post market monitoring.
• Knowledge of standards and regulations such as IEC 81001-5-1, IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity guidance, EU MDR, IEC 62443, ISO 27001, and GDPR.
• Ability to translate cybersecurity risks into practical engineering requirements, documentation, supplier evidence, and risk‑based decisions.
• Pragmatic, can‑do professional with strong communication skills and the ability to influence stakeholders without direct authority.
• Candidates with background in embedded software, software architecture, IoT, connected products, mobile applications, or cloud platforms are welcome to apply.

Location

This is a Baar‑based hybrid role, with three in‑office days each week to enable rapid collaboration.

Why join At Medela

you will be joining a global community of colleagues, united by the purpose that drives our business: helping people.

Medela exists to advance human health and wellbeing through knowledge‑based and innovative human milk and medical vacuum solutions.

Our employees are empowered to serve this purpose in a family‑owned company that is growing rapidly around the world.

We value intensive exchanges, diverse perspectives, and unbureaucratic decisions.

You will have the opportunity to develop at an international level, and witness the direct impact your work has on our company’s success.

Medela is the #1 breast pump brand* and one of the leading companies in medical vacuum technologies respected and trusted by doctors and healthcare professionals from around the world.

A family‑owned company with a global presence in Europe, America and Asia, Medela has 21 locations worldwide and a sales network of independent partners in over 100 countries.

The company has production and warehouse facilities in Baar (Switzerland), McHenry (Illinois, USA) and Changzhou (China).

With over 1800 employees, Medela improves health and well‑being through the pursuit of knowledge and the development of innovative products and services, empowering mothers, babies and patients to live their lives to the fullest.

Founded in 1961 by Olle Larsson, his son Michael Larsson serves as Chairman of the Board of Directors since 2001.

Thomas Golücke is the CEO of the company since 2024.

"By creating a culture of belonging, we are building engaged teams that work together to serve our customers as one Medela family"