Healthcare embedded cybersecurity

Immediate Joiner 

Exp: 6 – 12 years

Postmarket Surveillance and Continuous Improvement

• Perform postmarket cybersecurity surveillance, including incident analysis, trend evaluation, and integration of lessons learned into the product development lifecycle.
• Coordinate and execute incident response activities, including detection, containment, root cause analysis, remediation, and regulatory reporting when applicable.
• Maintain audit-ready cybersecurity documentation, metrics, and lifecycle records.
• Contribute cybersecurity input to product roadmaps, change impact assessments, and regulatory submission dossiers.

 

Vulnerability and Risk Management

• Continuously monitor and assess cybersecurity vulnerabilities affecting marketed critical-care devices.
• Lead vulnerability handling processes, including triage, remediation tracking, and verification of corrective actions.
• Evaluate and document cybersecurity risks, define appropriate mitigations, and ensure alignment with Quality System and regulatory requirements
• Support residual risk evaluation and provide cybersecurity input for design and regulatory justifications.

 

Patching, Updates, and Testing

• Plan and manage routine security updates and patches to maintain ongoing device protection and compliance.
• Ensure periodic cybersecurity testing and verification activities are performed to confirm product security and functional integrity.
• Verify the effectiveness of remediation and update deployments in collaboration with R&D, Quality, and Field Service teams.

 

Disclosure and Communication

• Manage the Coordinated Vulnerability Disclosure (CVD) process with researchers, customers, and regulators to ensure transparent and compliant communication of security findings.
• Communicate forthcoming remediations, patches, and updates to customers clearly and proactively, providing appropriate implementation guidance.