Cyber Security Manager

Medela; Baar; Híbrido; CHF 140.000 - 190.000; Jornada completa

Descripción de la vacante

Medela is seeking a Cyber Security Manager to lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, APIs, and data flows. The role defines strategy, governance, and roadmaps while coordinating vulnerability management and post-market monitoring.

You will represent cybersecurity in architecture reviews and supplier discussions, ensuring end-to-end security across firmware, apps, cloud, and backend services within a regulated environment.

Formación

• Degree in Computer Science, Software Engineering, Electrical Engineering, Biomedical Engineering, Cybersecurity, or a related field.
• Demonstrated product cybersecurity experience, preferably in medical devices, connected products, embedded systems, mobile apps, cloud services, IoT, or a regulated environment.
• Hands-on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle, security testing, and post-market monitoring.

Responsabilidades

• Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and data flows.
• Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working; conduct threat modelling, risk assessments, control definition, and residual risk evaluations.
• Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities.
• Coordinate vulnerability management, penetration testing, security verification, and remediation activities.
• Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions.
• Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.
• Own the cybersecurity architecture and design decisions.
• Define the cybersecurity requirements for suppliers and reviewing supplier cyber security evidence and documentation

Conocimientos

Cybersecurity

Threat modelling

Vulnerability assessments

SBOMs

Secure development lifecycle

Post-market monitoring

Stakeholder communication

Educación

Degree in Computer Science or related field

Background in Biomedical/Electrical Engineering or Cybersecurity

Descripción del empleo

Are you interested in working for a company that is passionate about its customers? That lives its values and nurtures its employees? Then Medela is the company for you.

We are seeking a Cyber Security Manager to join our R&D team.

Your responsibilities

• Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and connected data flows.
• Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working. Conduct threat modelling, cybersecurity risk assessments, control definition, and residual risk evaluations.
• Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities.
• Coordinate vulnerability management, penetration testing, security verification, and remediation activities.
• Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions.
• Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.
• Own the cybersecurity architecture and design decisions.
• Define the cybersecurity requirements for suppliers and reviewing supplier cyber security evidence and documentation

Location

This is a Baar-based hybrid role, with three in-office days each week to enable rapid collaboration.

Your profile

• Degree in Computer Science, Software Engineering, Electrical Engineering, Biomedical Engineering, Cybersecurity, or a related field.
• Demonstrated product cybersecurity experience, preferably in medical devices, connected products, embedded systems, mobile apps, cloud services, IoT, or another regulated environment. Good understanding of product cybersecurity across firmware, apps, cloud and backend services, APIs, connected ecosystems, and data flows.
• Hands-on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle, security testing, and post market monitoring.
• Knowledge of standards and regulations such as IEC 81001-5-1, IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity guidance, EU MDR, IEC 62443, ISO 27001, and GDPR.
• Ability to translate cybersecurity risks into practical engineering requirements, documentation, supplier evidence, and risk-based decisions.
• Pragmatic, can-do professional with strong communication skills and the ability to influence stakeholders without direct authority.
• Candidates with background in embedded software, software architecture, IoT, connected products, mobile applications, or cloud platforms are welcome to apply

Why join

At Medela, you will be joining a global community of colleagues, united by the purpose that drives our business: helping people. Medela exists to advance human health and wellbeing through knowledge-based and innovative human milk and medical vacuum solutions.

Our employees are empowered to serve this purpose in a family-owned company that is growing rapidly around the world. We value intensive exchanges, diverse perspectives, and unbureaucratic decisions. You will have the opportunity to develop at an international level, and witness the direct impact your work has on our company's success.

Due to work permit restrictions, we can only consider applications from Swiss Nationals, UK, EU citizens as well as relevant work-permit holders for Switzerland.

For this recruitment we will not consider any applications sent through by agencies.