Cybersecurity Risk Specialist

We are seeking a Medical Device Cybersecurity Risk Specialist to lead cybersecurity risk management across medical devices, healthcare systems, and digital health ecosystems.

Responsibilities include

• developing and maintaining cybersecurity risk programs,
• conducting risk assessments and threat modeling,
• reviewing penetration tests and vulnerability data,
• evaluating patient safety risks,
• supporting device integration and lifecycle management,
• producing risk reports and dashboards,
  
  

and

• communicating risks to technical and non-technical stakeholders.
  
  

Qualifications encompass

• expertise in risk frameworks such as NIST CSF, ISO 27001/27005, FAIR, COSO,
• experience in medical device cybersecurity and healthcare IT,
• familiarity with regulatory standards like FDA guidance and HIPAA,
• skills in risk assessments, threat modeling, and risk tracking tools,
  
  

and

• knowledge of cybersecurity controls, cloud security, and SDLC security.
  
  

Key skills include strong analytical, communication, and collaboration abilities to support risk mitigation, compliance, and emerging threat assessments.