Irhythmtech
Product Security Manager
Remote - US
Sponsorship not specified$171k-$800kDetected 12 days ago
AlgorithmsGitData AnalysisCybersecurityPenetration TestingDetection EngineeringIncident ResponseComplianceHIPAAPatient CareFDA RegulatoryMedical DevicesCommunicationCollaborationProblem SolvingCISSP
About the role
- We are seeking a Product Security Manager with proven experience in the medical device industry.
- In this role, you will safeguard medical devices by identifying, assessing, and mitigating security risks unique to healthcare technology.
Responsibilities
- Threat Modeling: Develop and maintain device-specific cyber threat models, factoring in patient safety, data privacy, and operational continuity.
- Security Documentation: Create and maintain cybersecurity documentation for pre- and post-market activities, ensuring regulatory alignment.
- Data Flow Diagrams: Produce detailed data flow diagrams to support the threat modeling process.
- Threat Detection Tools: Leverage and maintain application and threat detection tools (Veracode, Snyk, GitLab, or equivalent) to identify security flaws early in the SDLC.
- Incident Response: Support investigation and remediation of device-related security incidents, minimizing impact and preventing recurrence.
- Data Privacy Compliance: Partner with the Privacy Team to ensure adherence to HIPAA, GDPR, and other data protection regulations.
- Develop and maintain device-specific cyber threat models, factoring in patient safety, data privacy, and operational continuity.
- Create and maintain cybersecurity documentation for pre- and post-market activities, ensuring regulatory alignment.
- Produce detailed data flow diagrams to support the threat modeling process.
- Support investigation and remediation of device-related security incidents, minimizing impact and preventing recurrence.
Requirements
- Bachelor's degree in Computer Science, Information Security, or related field.
- Strong understanding of security principles, methodologies, and tools within the PDLC and SDLC.
- Experience operating in a regulated environment (FDA, HIPAA, GDPR, international regulatory frameworks).
- Ability to understand intro dependencies of teams across
- Proven track record of 510k experience and completion.
Nice to have
- Experience with international frameworks and standards (EU MDR, JIS T 2304 / IEC 62304).
- Understanding penetration testing methodologies and tools, able to work with pen test teams independently with little guidance.
- $127,000.00 - $165,000.00
- We welcome and celebrate people of all backgrounds, experiences, skills, and perspectives. iRhythm Technologies, Inc. is an Equal Opportunity Employer.
- We will consider for employment all qualified applicants with arrest and conviction records in accordance with all applicable laws.
- iRhythm provides reasonable accommodations for qualified individuals with disabilities in job application procedures, including those who may have any difficulty using our online system.
- If you need such an accommodation, you may contact us at taops@irhythmtech.com
- About iRhythm Technologies
Compensation
- Estimated Pay Range
Benefits
- Curious and innovative problem solvers looking for the chance to meaningfully shape the future of cardiac health, our company, and your career
- iRhythm is a leading digital healthcare company that creates trusted solutions that detect, predict, and prevent disease.
- Through a relentless focus on patient care, iRhythm's vision is to deliver better data, better insights, and better health for all.
Company info
- As a part of our core values, we ensure an inclusive workforce.
Equal opportunity
- Equal Opportunity Employer.
Apply directly at Irhythmtech →Create a free account for alerts like thisView Irhythmtech immigration profile
This listing is sourced directly from Irhythmtech's careers page and normalized into a canonical job model.