Product Security Risk Analyst (Remote)

Stryker Group; Portage (MI); Remote; USD 100,000 - 216,000; Full time

Job summary

Join a forward-thinking company as a Product Security Risk Analyst, where you'll play a crucial role in managing product lifecycle risks and ensuring compliance with global standards. This exciting position involves collaborating with product teams, developing risk management frameworks, and communicating findings to stakeholders at all levels. With a focus on patient safety and security, you will drive initiatives that enhance organizational risk awareness and improve product security practices. If you're passionate about making an impact in the medical device industry and possess strong analytical and communication skills, this role is perfect for you.

Qualifications

• 4+ years of experience in risk management and compliance.
• Bachelor's Degree required with relevant certifications preferred.

Responsibilities

• Lead risk management processes across product portfolios.
• Communicate risk findings to diverse stakeholders effectively.

Skills

Stakeholder Communication

Risk Assessment

Data Analysis

Collaboration

Education

Bachelor's Degree

Tools

Excel

SmartSheet

PowerBI

OneTrust

Job description

As a Product Security Risk Analyst, you will drive comprehensive risk management throughout the product lifecycle while ensuring global compliance and patient safety, collaborating with customers and internal business partners.

What you will do

1. Lead risk management processes across product portfolios, developing forward-looking strategies and methodologies.
2. Build relationships with product teams, guiding them through risk mitigation journeys and connecting them with technical resources.
3. Assess compliance gaps and their risk implications, ensuring alignment with global standards (FDA, EU MDR, IEC 81001-5-1, ISO 27001).
4. Communicate risk findings to diverse stakeholders, from engineering teams to senior leadership, translating technical details into business impact.
5. Develop risk management frameworks, documentation, and tools while supporting secure development practices.
6. Track risks across products and portfolios, providing enterprise-level risk visibility.
7. Monitor security controls, evaluate effectiveness, and drive remediation efforts.
8. Stay current with industry trends and threats, sharing insights to improve organizational risk awareness.

What you need

Required:

1. Bachelors Degree.
2. 4+ years of related work experience.
3. Experience with risk assessment frameworks (e.g. NIST RMF).
4. Excellence in stakeholder communication and collaboration.
5. Proficiency with data analysis tools (e.g., Excel, SmartSheet, PowerBI).
6. Experience in stakeholder facilitation.

Preferred:

1. Relevant industry certifications (CRISC, CISM, ISACA).
2. Medical device industry experience, including exposure to global medical device regulations (UL-2900, IEC 81001-5-1).
3. Experience with GRC platforms (e.g., OneTrust).
4. Background in cybersecurity and/or product security.

$100,500 - $215,300 salary plus bonus eligible + benefits. Actual minimum and maximum may vary based on location. Individual pay is based on skills, experience, and other relevant factors.