Cyber Assurance Analyst
Cyber Assurance Analyst
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
Primary Function of Position:
- Intuitive Surgical is a highly innovative medical device manufacture that has changed the paradigm of minimal invasive surgery. We are looking for an individual that understands security controls data privacy and NIST ISO and HIPPA regulation and guidances and wants to apply that skillset to support pre/post sales activities of our medical devices/services; this can include conference calls with Clevel DPO Net/Sec Engineers Legal and Clinical customers to articulate and or answer security designs/questions of our product/services; completing customer risk assessment documentation and working with our Contract/Legal teams reviewing security and sales / service agreements. This role bridges traditional boundaries between cyber and IT risk and looks to expand better partnerships with sales and our customers to drive a more efficient sales/support customer experience
Roles and Responsibilities:
- Complete customer cyber risk and data privacy audit documentation with respect to our product and services
- Work closely with our internal regulatory bodies to ensure security data and HIPPA policies are functional effective and are in accordance with domestic and international regulatory compliances
- Participate in presales activities to champion the products cybersecurity and data privacy design controls and policies.
- Partner with product engineering to create and maintain manufacturing disclosure statements MDS2
- Understand the information lifecycle including data transfer data inuse and data at rest of products and services.
- Demonstrated ability to investigate and learn new technologies and products.
- Be knowledgeable with Intuitive Surgicals cybersecurity HIPPA and data privacy policies processes procedures
- Be able to execute adhoc projects as assigned by management
- Be able to work within a Global Support Team and providing support wide range of time zones; some travel and a flexible work schedule is required
- Collaborate with executive management and department leaders to assess near and longterm Information Security compliance needs
- Serve as subject matter expert to internal business and technology teams on range of compliance standards as influenced by regulatory mandates (e.g. SOX 2 HIPAA etc. and industry best practices (e.g. NIST CSF ISO 27001 etc.
Qualifications :
Skill/Job Requirements:
- Minimum of 5 years of experience in Information Security Internal Audit and/or IT Risk Management functions
- Minimum of 3 years of experience with managing IT Internal Audit or Information Security compliance programs
- Minimum of 3 years of information security risk governance and control frameworks such as ISO/IEC27000 series NIST CSF CSA CCM and PCI DSS
- Familiar working with hospital IT or in medical regulated environment
- Knowledge of FDA pre and post management of cybersecurity of medical device guidances NIST Cybersecurity Framework and or ISO 270001
- Experienced with network security infrastructure threats and vulnerabilities to networks and mitigate security threats.
- Experience with encryption cryptography and certificate/key management.
- Understanding of the Risk Management Framework (RMF)
- Expertise with a variety of information protection technologies including DLP data classification and information rights management solutions.
- Great customer facing skills that can discuss technical information with a wide range of audiences (from a service engineer clinicians to a CTO/CIO)
- Exceptional ability to multitask make sound judgments and respond with a sense of urgency in order to effectively support the business. Thoroughness in completing tasks is imperative.
- Experience managing and completing projects
- Ability to handle stress and work well under pressure
- Knowledge of key IT risks controls and ability to use technologybased audit techniques.
- Experience in supporting the formal testing required by government/industry accrediting authorities and preparing System Security Plans
- Understanding of information operations concepts such as: Access Control User Authentication & Identity Management Vulnerability and Malware Analysis.
- Experience in Federal Information System Management Act (FISMA) reporting and other information assurance assurancerelated compliance reporting.
- CISA CISM CAP or CISSP are preferred
Additional Information :
Due to the nature of our business and the role please note that Intuitive and/or your customer(s) may require that you show current proof of vaccination against certain diseases including COVID19. Details can vary by role.
Intuitive is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified applicants and employees and prohibit discrimination and harassment of any type without regard to race sex pregnancy sexual orientation gender identity national origin color age religion protected veteran or disability status genetic information or any other status protected under federal state or local applicable laws.
Mandatory Notices
We will consider for employment qualified applicants with arrest and conviction records in accordance with fair chance laws.
We provide marketcompetitive compensation packages inclusive of base pay incentives benefits and equity. It would not be typical for someone to be hired at the top end of range for the role as actual pay will be determined based on several factors including experience skills and qualifications. The target salary ranges are listed.
Remote Work :
Yes
Employment Type :
Fulltime
Employment Type
Remote
