Cybersecurity GRC Manager for Technical Oversight of Software & Medical Solutions

Ascension Healthcare; Oregon City (OR); Remote; USD 80,000 - 100,000; Full time

Job summary

An established industry player is seeking a dynamic Cybersecurity Manager to lead a team focused on safeguarding medical devices and applications. This role involves overseeing compliance with regulatory standards and developing risk management strategies to combat cybersecurity threats. Ideal candidates will possess a strong leadership background in cybersecurity within the healthcare sector, showcasing their expertise in medical device technologies and security best practices. Join a mission-driven organization committed to providing compassionate care and making a significant impact in the community while advancing your career in a supportive environment.

Benefits

Paid time off (PTO)

Health insurance options

Retirement benefits with employer match

Long-term & short-term disability

Employee assistance programs (EAP)

Parental leave & adoption assistance

Tuition reimbursement

Qualifications

• 5+ years in cybersecurity, focusing on medical devices and healthcare IT.
• 2-3 years of management experience in a regulated industry.

Responsibilities

• Lead a cybersecurity team in assessing risks related to medical devices.
• Ensure compliance with industry standards and regulations.

Skills

Cybersecurity Management

Risk Management

Regulatory Compliance

Team Leadership

Communication Skills

Problem-Solving

Education

Bachelor’s degree in Computer Science or Information Security

High School diploma with 3 years experience or Associate's degree

Tools

NIST Cybersecurity Framework

ISO 27001

Job description

Details

+ Department: Security

+ Schedule: Full-Time Monday - Friday 8am-5pm CT

+ Location: Remote

Benefits

Paid time off (PTO)

Various health insurance options & wellness plans

Retirement benefits including employer match plans

Long-term & short-term disability

Employee assistance programs (EAP)

Parental leave & adoption assistance

Tuition reimbursement

Ways to give back to your community

Benefit options and eligibility vary by position. Compensation varies based on factors including, but not limited to, experience, skills, education, performance and salary range at the time of the offer.

Responsibilities

Job Summary:

We are seeking an experienced and dynamic Cybersecurity Manager to lead our cybersecurity team in reviewing medical devices and technical applications. In this role, you will be responsible for overseeing the cybersecurity review process for medical devices, software, and applications, ensuring compliance with regulatory standards, and driving strategies to mitigate potential cybersecurity threats. The ideal candidate will have a strong leadership background in cybersecurity within the healthcare industry, with a deep understanding of medical device technologies, risk management, and security best practices.

Key Responsibilities:

1. Team Leadership: Lead and manage a team of cybersecurity professionals in the review, assessment, and mitigation of cybersecurity risks related to medical devices and applications. Provide mentorship, direction, and professional development opportunities to team members.
2. Risk Management & Strategy: Develop and implement risk management strategies to assess, mitigate, and manage cybersecurity risks associated with medical devices and technical applications. Lead risk assessments, vulnerability analyses, and threat modeling exercises to identify security weaknesses and recommend corrective actions.
3. Regulatory Compliance Oversight: Ensure all medical devices and applications meet industry standards, regulations, and best practices, including FDA requirements, IEC 62304, ISO 14971, HIPAA, and NIST guidelines. Stay updated on evolving regulatory frameworks and ensure the organization is compliant with the latest cybersecurity standards.
4. Security Review & Auditing: Work in conjunction with other teams to facilitate the review and audit of all medical devices and technical applications. Ensure security controls are integrated throughout the product lifecycle from design and development through to deployment and post-market surveillance.
5. Collaboration & Cross-Functional Engagement: Collaborate with product management, IT, legal, and regulatory teams to advise on security considerations throughout the development and lifecycle of medical devices. Provide guidance on secure product design, secure coding practices, and overall cybersecurity strategy.
6. Security Awareness & Training: Lead the development and delivery of cybersecurity training and awareness programs for internal stakeholders, including product development teams and non-technical staff. Ensure that all employees understand the risks and are equipped to contribute to securing medical devices and applications. Foster a culture of cybersecurity awareness within the organization.
7. Continuous Improvement & Innovation: Drive continuous improvement in cybersecurity practices, procedures, and tools. Explore and implement emerging technologies and methodologies to enhance the security posture of medical devices and applications.

Qualifications:

1. Experience:

• 5+ years of experience in cybersecurity, with a significant focus on medical devices, healthcare IT, or embedded systems.
• At least 2-3 years of management experience leading teams of cybersecurity professionals in a regulated industry.
• In-depth knowledge of relevant industry standards such as FDA regulations, IEC 62304, ISO 14971, and cybersecurity frameworks like NIST and ISO 27001.
• Knowledge of medical device software architectures, including embedded systems, IoT (Internet of Things), & mobile applications in the healthcare space.
• Familiarity with cloud security practices and technologies, especially in healthcare environments.
• Previous experience in a regulatory compliance role, specifically within the medical device or healthcare industry.
• Proven experience conducting security reviews, risk assessments, penetration tests, and audits for technical applications or devices in regulated environments.
• Knowledge of medical device lifecycle, including design, testing, and deployment, and familiarity with industry-specific cybersecurity concerns.

Certifications:

• Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or similar are required for this role.

Skills & Knowledge:

• Strong understanding of medical device security risks, threat landscapes, and security controls.
• Proficient in cybersecurity frameworks, security architecture, risk management, and compliance for regulated industries.
• Proven ability to manage cross-functional teams and collaborate with senior leadership.
• Excellent written and verbal communication skills, with the ability to present complex cybersecurity concepts to non-technical audiences.
• Strong problem-solving abilities, decision-making skills, and attention to detail.
• Ability to work in a fast-paced environment and manage multiple priorities.

Requirements

Education:

1. High School diploma equivalency with 3 years of cumulative experience OR Associate's degree/Bachelor's degree with 2 years of cumulative experience OR 7 years of applicable cumulative job specific experience required.
2. 3 years of leadership or management experience preferred.

Additional Preferences

Preferences:

1. Bachelor’s degree in Computer Science, Information Security, or a related field.

Why Join Our Team

When you join Ascension, you join a team of over 134,000 individuals across the country committed to a Mission of serving others and providing compassionate, personalized care to all. Our inclusive culture, continuing education programs, career coaches and benefit offerings are just a few of the resources and tools that team members can use to create a rewarding career path. In fact, Ascension spent nearly $46 million in tuition assistance alone to support associate growth and development. If you are looking for a career where you can grow and make a difference in your community, we invite you to join our team today.

Equal Employment Opportunity Employer

Ascension will provide equal employment opportunities (EEO) to all associates and applicants for employment regardless of race, color, religion, national origin, citizenship, gender, sexual orientation, gender identification or expression, age, disability, marital status, amnesty, genetic information, carrier status or any other legally protected status or status as a covered veteran in accordance with applicable federal, state and local laws.

For further information, view the EEO Know Your Rights (English) (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf) poster or EEO Know Your Rights (Spanish) (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRightsSp_10_20.pdf) poster.

As a military friendly organization, Ascension promotes career flexibility and offers many benefits to help support the well-being of our military families, spouses, veterans and reservists. Our associates are empowered to apply their military experience and unique perspective to their civilian career with Ascension.

Pay Non-Discrimination Notice (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf)

Please note that Ascension will make an offer of employment only to individuals who have applied for a position using our official application. Be on alert for possible fraudulent offers of employment. Ascension will not solicit money or banking information from applicants.

E-Verify Statement

This employer participates in the Electronic Employment Verification Program. Please click the E-Verify link below for more information.

E-Verify (https://e-verify.uscis.gov/web/media/resourcesContents/E-Verify_Participation_Poster_ES.pdf)