Risk Manager - Cybersecurity

RaySearch Laboratories AB (publ); Stockholms kommun; On-site; SEK 700,000 - 1,000,000; Full time

Benefits offered by this job

Gym access

Lunch buffet

Fika

Rooftop terrace

Team events

Job summary

RaySearch Laboratories AB (publ) is seeking a Risk Manager to own risk management across our cybersecurity and information security domains for medical software. You will identify, assess, and mitigate risks throughout product lifecycles, with emphasis on cloud-based solutions and secure development practices, collaborating with development teams and other risk managers.

The role requires a BSc or MSc in engineering (or equivalent) and 3+ years in software development environments.

Qualifications

• BSc or MSc degree in engineering, or equivalent.
• 3+ years’ experience in a software development environment.
• Excellent written and spoken English and Swedish.

Responsibilities

• Participate in project planning with the project management team.
• Support the development team with risk management tasks and design risk analysis.
• Own and maintain the project's risk management documentation.
• Coordinate cybersecurity activities within product development and SSDLC.

Skills

Risk assessment

Threat modelling

Cybersecurity

Education

BSc or MSc in engineering or equivalent

Job description

Job Summary

Are you passionate about ensuring that complex medical software is secure, resilient, and fully compliant with international standards? As Risk Manager, you will take ownership of identifying and mitigating risks within cybersecurity and information security across our products. With a structured mindset and keen attention to detail, you will play a central role in maintaining the integrity, reliability, and compliance of our software solutions.

About the job

As Risk Manager, you will be responsible for identifying, assessing, and mitigating cybersecurity and information security risks across all RaySearch products. As part of a smaller cybersecurity group, you will work with all aspects of cybersecurity for our product delivery including compliance, threat modelling, developer training, penetration testing, tooling and more. Your responsibilities will span the entire product lifecycle, with a particular focus on cloud-based solutions and secure software development practices. You will collaborate closely with development teams across the organization and work alongside other Risk Managers to ensure comprehensive risk management and compliance with international standards.

Main responsibilities

• Participate in project planning together with the project management team.
• Support the development team with risk management related tasks, e.g., ensuring that the risk management process is applied, taking part in design and risk analysis of new and changed functionality and ensuring that risks are appropriately mitigated and tested.
• Own and maintain the project's risk management documentation.
• Coordinate cybersecurity management activities within product development and the secure software development life cycle (SSDLC).
• Own the development and maintenance of cybersecurity documentation for regulated products, including FDA-related cybersecurity requirements and frameworks.

Your profile

We are looking for someone who understands the importance of risk management in medical software and is motivated by working in this field with all the responsibilities it entails. You are responsible, meticulous and structured, with a strong personal drive and the ability to work independently in a highly organized and efficient manner. You have experience working with or alongside software development teams and possess a strong technical understanding of software development processes, enabling you to navigate complex software environments and collaborate effectively with technical stakeholders.

Requirements

• BSc or MSc degree in engineering, or equivalent.
• 3+ years' experience working in a software development environment with complex software products.
• Excellent written and spoken communication skills (English and Swedish).

Merits

• Experience from the medtech industry or other regulated or safety critical industries.
• Experience of device risk management.
• Experience with product safety standard requirements for medical devices (IEC/ISO standards, e.g., ISO 14971).
• Leadership or project management experience.
• Experience as a system developer.

Benefits

At RaySearch, we offer a diverse and inclusive work environment, fostering openness, sincerity, and collaboration. Located in Hagastaden, Stockholm's Life Science Hub, our modern and creative workspace includes an in-house gym, yoga, and social activities like ping pong, table football, and regular after-work events. Our bistro serves a fantastic lunch buffet, and we offer morning- and afternoon-fika every day. Our rooftop terrace also provides a stunning 360-degree view of Stockholm, enhancing the work experience. All of this comes attached with a competitive compensation and benefits package.

We believe in equal opportunities, value diversity and work actively to prevent discrimination.