Job Information
Medtronic Senior Cybersecurity Specialist in Nanakramguda, India
At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.
A Day in the Life
The Senior Cyber Info Assurance Analyst will join the Business Information Security team within the Business Partner Services (BPS) group and partner closely with the Global Security Office (GSO). You will serve as a champion of the GSO, focusing on enhancing user experience with our business partners. You’ll serve as a cybersecurity and compliance subject matter expert (SME) to the intelligent Data Solutions business. The cybersecurity SME will focus on identifying, prioritizing and driving remediation of all security risks owned by the business
The primary focus of the role will be on supporting implementation of achieving and/or maintaining HIPAA, GDPR and other regulatory compliance, and achieving and maintaining the ISO27011 and HITRUST certifications. You will facilitate and assist the business by interpreting the requirements and driving technical remediations. Communicate, escalate, and track progress on assessment remediation activities. Understand information security risks that are inherent to a business and articulate those risks in business terms. Support Commercial activities including contracting and IT/security questionnaires. Maintain current knowledge on data privacy and information security topics and their applicable program requirements. Provide concierge service to our business stakeholders when interacting with the GSO.
We believe that when people from different cultures, genders, and points of view come together, innovation is the result —and everyone wins. Medtronic walks the walk, creating an inclusive culture where you can thrive.
Bring your talents to an industry leader in medical technology and healthcare solutions – we’re a market leader and growing every day. You can be proud to be a part of technologies that are rooted in our long history of mission-driven innovation. You will be empowered to shape your own career. We support your growth with the training, mentorship, and guidance you need to own your future success. Together, we can transform healthcare.
Maintain relationships within Operating Unit proactively share business' upcoming projects to the GSO
Engage with cross functional teams to drive complex data security issues to resolution
Contribute continuous improvement to the methodologies and practices of the Business Information Security to attain higher capability maturity levels
Track status of open requests/tasks and drive accountability of requestors to ensure timely submitting
Partner with the GSO and Privacy to perform deep dives over high risk processes and systems to identify and remediate gaps in data security
Support implementing monitoring Security compliance activities related to HITRUST, ISO27001, SOC2, etc.
Help facilitate and/or respond to Customer Inquiries
Streamline processes and use of tools across Global IT to ensure data flow and security is maintained in the most efficient way possible
Provide insight and business background to include data security, encryption, authorization, authentication, and access controls to the GSO process teams, when needed
Prepare status reports on data security and privacy matters to educate the Business Relationship Managers (BRM) and business leadership about business owned IT security risks
Compile and communicate security/privacy risk to Business IT Leadership, BRMs and business leadership as appropriate
Establish a forum for outreach to the broader organization you represent to educate business requestors, business leaders, and IT leadership on the GSO Engagement processes
Demonstrate strong knowledge of IT security controls, security risk and threats
Regularly meet with the GSO to discuss issues, concerns, complex or high visibility projects, process improvement areas, and review SLA goals and actual results – leverage these relationships and information to ensure business readiness, engagement, and alignment with security programs and initiatives.
Act as a resource for security compliance questions, risks, and concerns for the bisomess
Perform other security-related duties as and when directed by the Business Information Security management
Engage in stakeholder management in their respective business
Reach out and meet with stakeholders, educate them about the GSO and Global IT
Serve business stakeholders and requesters as "Customers" with a focus on service and support
Advise business / R&D teams on attaining security reviews earlier in their projects
Hold yourself and your business accountable for committed deliverables and deadlines
Ensure timely response to requests for security support from the business
BASIC QUALIFICATIONS
- High school diploma (or equivalent) and 12+ years of experience
OR
- Bachelor’s degree and 7+ years of experience or advanced degree and 5+ years of experience.
NICE TO HAVE (Preferred Qualifications)
Previous Medtronic experience
Preference given to current Medtronic employees
Strongly preferred:
Experience in audit, risk management, vulnerability management, governance, IT security and/or compliance functions
Experience with cloud storage systems/PaaS/SaaS
Experience with AWS highly regarded
Clear understanding of product architecture, data, data flows, and usage
Experience working across business units and geographical boundaries to engage IT, business counterparts, and team members
Ability to understand, question, and interpret internal and external security environments
3+ years working in IT GRC or controls function
Proven experience dealing with ambiguous situations, and producing a consistent result with varied input
Working knowledge of IT and security control frameworks (NIST, CobiT, ITIL, CyberEssentials, HDH), as well as regulatory requirements (PCI, HIPAA, GDPR, CCPA)
Knowledge of information risk concepts and practices required
Knowledge of controls manifestation in large global corporations with regional and local presence is required
Experience communicating conceptual and technical information
Experience translating technical data into business impact information
Experience working with ServiceNow GRC (Governance, Risk, and Compliance)
Knowledge of Frameworks, including PCI, SOX and ISO 27001 is a plus
Detailed knowledge of ITGRC, Auditing principles / practices is desired
Good understanding of Vendor management desired
Good understanding of security frameworks desired, included but not limited to NIST, HISTRUST, OWASP, etc.
Good project management skills desired.
Experience in examining reports on security controls (SSAE-16, PCI-ROC, Application Security Assessments)
Physical Job Requirements
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.
Benefits & Compensation
Medtronic offers a competitive Salary and flexible Benefits Package
A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create. We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.
This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).
About Medtronic
We lead global healthcare technology and boldly attack the most challenging health problems facing humanity by searching out and finding solutions.
Our Mission — to alleviate pain, restore health, and extend life — unites a global team of 90,000+ passionate people.
We are engineers at heart— putting ambitious ideas to work to generate real solutions for real people. From the R&D lab, to the factory floor, to the conference room, every one of us experiments, creates, builds, improves and solves. We have the talent, diverse perspectives, and guts to engineer the extraordinary.
Learn more about our business, mission, and our commitment to diversity here (http://www.medtronic.com)
Welcome to our new Careers Site!
If you applied before July 22nd, please check your email for a notification from us providing you with instructions and a link to set up your new account and retain access to your current activity. If you do not see an email from us, please feel free to proceed with creating a new account.
We lead global healthcare technology and boldly attack the most challenging health problems facing humanity by searching out and finding solutions.
Our Mission — to alleviate pain, restore health, and extend life — unites a global team of 90,000+ passionate people.
We are engineers at heart— putting ambitious ideas to work to generate real solutions for real people. From the R&D lab, to the factory floor, to the conference room, every one of us experiments, creates, builds, improves and solves. We have the talent, diverse perspectives, and guts to engineer the extraordinary.
We change lives . Each team member, each day, helps to improve and redefine how the world treats the most pressing health conditions, from heart disease to diabetes. Our industry leadership comes from the passion and ingenuity of our people. That’s who we are. Working alongside one another, we use science, medicine, and a profound understanding of the human body to build extraordinary technologies that can transform lives.
We build extraordinary solutions as one team . With one Medtronic Mindset defining how we work. Speed and decisiveness run through our DNA. Diverse perspectives inspire our bold answers to any challenge that comes our way. And we deliver results the right way, breakthrough after patient breakthrough.
This life-changing career is yours to engineer . By bringing your ambitious ideas, unique perspective and contributions, you will…
Build a better future, amplifying your impact on the causes that matter to you and the world
Grow a career reflective of your passion and abilities
Connect to a dynamic and inclusive culture that welcomes the challenge of life-long learning
These commitments set our team apart from the rest:
Experiences that put people first . Respect for people is the hallmark of our humanity. It fuels our team to positively impact even a single life. And it means we put our people first at Medtronic as well, creating a culture of belonging and always pushing to get you the career-building resources you need.
Life-transforming technologies . No matter your role, you contribute to technologies that transform lives. What we build empowers patients to live life on their terms.
Better outcomes for our world . Here, it’s about more than the bottom line. Our Mission to improve human welfare drives us. We advance healthcare, society, and equity with every design, inside and outside our walls.
Insight-driven care . Fresh viewpoints. Cutting-edge AI, data, and automation. You're shaping the future of healthcare technology and defining the next generation of breakthroughs in care
It is the policy of Medtronic to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, Medtronic will provide reasonable accommodations for qualified individuals with disabilities.
For sales reps and other patient facing field employees, going into a healthcare setting is considered an essential function of the job and we expect our employees to comply with all credentialing requirements at the hospitals or clinics they support.
This employer participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here (https://www.e-verify.gov/employees) .
For updates on job applications, please go to the candidate login page and sign in to check your application status.
If you need assistance completing your application please email AskHR@medtronic.com
To request removal of your personal information from our systems please email RS.HRCompliance@medtronic.com
Medtronic
-
- Medtronic Jobs