The Senior Information Security Manager at CNH will lead the security initiatives for information systems, with a focus IoT including medical devices crucial for care delivery, research, and hospital operations. This role involves developing and managing a comprehensive information security program, collaborating with diverse stakeholders, and leading a team dedicated to minimizing vulnerabilities in IoT. The ideal candidate will possess a deep understanding of industry standards and best practices in vulnerability management, excellent communication and collaboration skills, and experience in the full lifecycle management of IoT devices, ensuring robust security from concept to decommissioning. Experience in configuring and using tools such as Medigate, Tenable, Microsoft Defender, Cortex, Tanium and Splunk will be a plus in this role.

Minimum Education

• Bachelor's Degree Bachelor's degree in relevant discipline (Required)
• Master's Degree (Preferred)

Minimum Work Experience

• 7 years of experience in medical device engineering, operations, or maintenance roles (Required)
• 3 years in cybersecurity (Required)
• 3 years in a management role (Required)

Required Skills/Knowledge

• Experience leading some or all of medical device security program
• Deep and broad knowledge of relevant standards and best practices in medical device engineering, operations, maintenance, and security
• Experience designing and implementing the full life cycle of medical device ownership, including requirements development, procurement, installation, integration, operations, maintenance, upgrade, and decommissioning
• Outstanding capability to collaborate with diverse stakeholders across all functional roles and technical capabilities
• Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills; and the ability to communicate information risk-related concepts to technical as well as nontechnical audiences
• Background in feature and benefit cost analysis
• Familiarity with relevant standards and best practices, including: AAMI TIR57, HiTech, HIPAA, and the CSF

Functional Accountabilities:

• Providing leadership in defining, prioritizing and delivering initiatives associated with the information security program
• Advising and assisting medical device stakeholders in operationalizing and adhering to connected device security requirements
• Managing, mentoring, supporting, and empowering information security operations staff to excel in their job performance and career objectives
• Overseeing the development, maintenance and execution a multi-year enterprise-wide security road map to protect connected medical devices and associated data
• Providing input and support to connected medical device product and support teams throughout the connected device life-cycle from concept to decommissioning

Leader Accountabilities Manager:

Deliver

• Set and clearly communicate team goals and priorities in alignment with departmental goals and budgets
• Develop the budget and assign resources to meet the team goals
• Provide the resources and guidance required for employees to perform effectively
• Develop procedures to ensure high safety and quality, and course-correct as needed
• Identify customers' needs and ensure service excellence in meeting those needs

Engage

• Be the link between the department and the team in defining the strategies to meet team goals
• Provide prompt and clear verbal and written feedback to staff and manage/guide their performance
• Ensure team adherence to regulations, policies and procedures
• Manage the working environment to promote productivity and motivation
• Represent the team in clearing obstacles to high performance
• Recruit talents and develop their capabilities
• Monitor and promote strong employee engagement

Grow

• Encourage and share new ways of making the right work easier to do
• Recognize and share incremental improvements in operations
• Promote the success of organizational and department initiatives by clearly aligning programs to the mission