Product Security & Compliance Lead

Myriad Genetics; United States; On-site; USD 140,000 - 220,000; Full time

Job summary

Myriad Genetics seeks a Product Cybersecurity and Compliance Lead to act as the technical SME for product cybersecurity and regulatory cybersecurity initiatives. You will partner with engineering, regulatory, and quality teams to integrate cybersecurity into the product lifecycle and support regulatory submissions requiring cybersecurity evidence and documentation.

The role leads SPDF activities, threat modeling, architecture reviews, and risk assessments while coordinating cross-functional

Qualifications

• 7+ years of cybersecurity, application security, or product security experience.
• Experience supporting software development or product engineering organizations.
• Experience with threat modeling, architecture reviews, and secure SDLC practices.
• Experience conducting product cybersecurity risk assessments.
• Experience supporting regulated products or regulated software development environments.
• Strong communication and stakeholder management skills.
• Ability to lead cross-functional initiatives without direct authority.

Responsibilities

• Serve as technical SME for product cybersecurity across regulated products.
• Provide cybersecurity guidance for FDA, PMDA, IVDR, and related requirements.
• Lead threat modeling, security architecture reviews, and SPDF activities.
• Promote security-by-design practices throughout the product lifecycle.
• Coordinate cybersecurity workstreams with multiple teams and milestones.
• Support regulatory submissions with cybersecurity evidence and documentation.

Skills

Cybersecurity

Product security

Application security

Threat modeling

Secure SDLC

Regulatory compliance

Security architecture

Cross-functional leadership

Job description

Myriad Genetics seeks a Product Cybersecurity and Compliance Lead to act as the technical SME for product cybersecurity and regulatory cybersecurity initiatives. You will partner with engineering, regulatory, and quality teams to integrate cybersecurity into the product lifecycle and support regulatory submissions requiring cybersecurity evidence and documentation.

The role leads SPDF activities, threat modeling, architecture reviews, and risk assessments while coordinating cross-functional