Stryker
Job Description:
The Product Security Manager will report to the Head of Product Security and will work directly with international business divisions. In this role you will have the capability to directly influence technical innovation and enhance security maturity of our digital health and product information networks.
Job Responsibilities:
- Where necessary, facilitate the creation of Security policies.
- Act as of Product Security representative and subject matter expert to the focal Stryker division/s.
- Support Security Event/Incident Management.
- Support Security-Related Customer Communications.
- Facilitate/Approve Security Risk Table.
- Support Engineering / Architecture and data flow diagram Reviews.
- Support Divisional Process Owners to integrate compliance requirements and security best practices into their quality system procedures.
- Coordinate with Global Security services to maintain alignment of holistic security support.
- Monitor Vulnerability and Exploitability Assessments for in-scope applications/data.
- Follows established quality measures to assess overall success of team program and provides reports to leadership. Recommends changes to established quality measurements as appropriate.
- Monitor Security Status updates for division product portfolio.
- Encourages ongoing skill development by providing opportunities for continued education.
- Monitor Security Pre/Post-Market Software Management.
- Participate in divisional design reviews to ensure appropriate security controls implemented as design inputs (DI).
- Facilitate/Approve Product Security deliverables that achieve and maintain compliance with regulatory requirements and/or industry certifications for cloud environments.
- Monitor and communicate division Key Performance and Key Risk Indicators.
- Facilitate the use of internally developed security technologies, capabilities, and relevant vendor tools based on security requirements.
- Work closely with leadership and work teams to implement security controls in new product development and operational security activities.
Job Requirements:
Qualification & Experience:
- Strong, demonstrable experience with Public Key Infrastructure.
- Experience in developing and delivering detailed presentations.
- Strong experience security technologies that support static and dynamic code analysis, configuration monitoring, GRC, and vulnerability analysis.
- Experience in supporting compliance requirements for industry certifications (SOC2 Type2, HIPAA, HITRUST, or CMMC) are preferred.
- Demonstrated experience in developing and streamlining key aspects of quality systems to ensure compliance with applicable regulations.
- Demonstrated knowledge of Project Management.
- Experience with risk management methodologies, trending, design control, threat modelling, vulnerability ranking, and product enhancements.
- CISSP security certification is required.
- Bachelor’s Degree in Computer Science, Information Systems, Engineering or related field is required. An advanced degree is preferred.
- 8 years of experience in product security or cloud environment security is required.
- Strong experience with System and Software Development Processes and Lifecycles for new product development.
- 8 years of experience in product security or cloud environment security is required.
- CCSP or Azure Security Engineer, CEH or LPT or other security specific certifications are preferred.
- Experience in working with cloud based IoT environments is preferred.
- Experience with event and incident response, including incident documentation.
Job Details:
Company: Stryker
Vacancy Type: Full Time
Job Location: Kalamazoo, MI, US
Application Deadline: N/A
