Privacy and Security Lead (m/f/d) – Critical Care in Homburg

• As a Security Expert, you ensure cybersecurity from the start of the development phase throughout the whole developing process of our medical technology.
• You perform standard operating procedures (SOPs), carry out risk assessments, handle vulnerability management, and are accountable for product cybersecurity compliance roadmap.
• Furthermore, you drive awareness among your colleagues about the importance of privacy and security in the design of medical devices.
• In addition to that, you are responsible for adhering to the product-specific cybersecurity strategies and define and introduce appropriate policies in the product development teams.
• Also on your agenda: identification of suitable tools for ensuring IT security and implementation of these tools into the departments involved.
• Not only do you take responsibility for the (residual) cybersecurity risk, but you also pay close attention to protect security policies and procedures.
• In addition, you support the design and execution of vulnerability assessments, penetration tests and security audits.
• Finally, you contribute your expertise to working groups and you are an active member of the GRD (Global Research & Development) cybersecurity community.

• Master’s degree in Computer Science, Information Security or a similar field of study
• Min. 5 years of experience in cybersecurity – ideally as Certified Information Security Manager (CISM) or with a similar certification, such as CSSLP, CISSP or OSCP
• Ideally familiar with the Microsoft Security Development Lifecycle, including risk modeling, vulnerability analysis, and secure coding techniques
• Equally desirable: know-how in Microsoft Thread Modeling Tool, custom template creation, static code analysis, the use of tools such as Fortify SCA and Klocwork, and working with fuzzing concepts and tools
• Preferably familiar with the regulations and quality standards for medical devices, e.g. ISO / IEC 362443 4-1 and/or 4-2, ISO 13485, ISO 14971 and/or FDA 21 CFR 820.30,
• Knowledge of the cyber security framework, e. g. NISR SP 800, ISO 27000 and NIST CSF, is of advantage
• Fluent in German and English
• Very good communication competence with strong coaching and presentation skills and the willingness to work with various global corporations

Working@Global Research & Development (GRD)

Our aim in GRD: Global research. We work together with strong partners and start-ups. An inspiring environment awaits you with the freedom that you need. Over 800 colleagues from different disciplines work in international teams.

The Bad Homburg site

This is where everything comes together – most of the R&D activities take place at our sites in Schweinfurt and Bad Homburg. In Bad Homburg, medical professionals work side-by-side with software specialists, business economists and engineers in interdisciplinary teams to develop new innovations. The company headquarters is also located in Bad Homburg. A total of 3,500 employees work in different companies at the location.

___________________________________________________________________

Contribute to our work and use your knowledge to improve the quality of life of patients. Thanks to our work, dialysis patients can look to the future with confidence today. The demand for modern dialysis processes is increasing globally – for us, this means that we are growing.

Let’s work together: inquisitive and with high demands for quality.

https://karriere.fresenius.de/en/our-company/fresenius-medical-care/global-research-development

Global Research & Development (GRD)