Cybersecurity Analyst

Description:

Title: Cybersecurity Analyst V

Location: Remote

Duration: Long term

Duties: This role is for an Offshore - India-based Key Responsibilities:

Monitor and assess cybersecurity threats, vulnerabilities, and incidents affecting released medical devices.

Lead post-market security investigations and coordinate vulnerability response and remediation activities.

Perform risk assessments and impact analyses in alignment with FDA, ISO/IEC 81001-5-1, and NIST cybersecurity frameworks.

Collaborate with product teams to develop and deploy security patches and updates.

Maintain and improve post-market surveillance processes for cybersecurity.

Support regulatory submissions and audits related to post-market cybersecurity.

Contribute to security incident response planning and execution.

Engage with external researchers and coordinate responsible disclosure processes

Skills: Your Skills and Expertise

To set you up for success in this role from day one, Solventum requires (at a minimum) the following qualifications:

Bachelor's degree Computer Science, Engineering or similar or higher (completed and verified prior to start) Six (6) years of general Cybersecurity experiences in a private, public, government or military environment Three (3) years of Product Security preferably medical devices in a private, public, government or military environment Three (3) years of Vulnerability Management experience in a private, public, government or military environment Three (3) years of Cybersecurity Process Development Experience assessing and improving cybersecurity maturity using the NIST CSF Implementation Tiers and familiarity with the NIST CSF Implementation Tiers (Partial, Risk-Informed, Repeatable, Adaptive).

Excellent communication skills are essential for collaborating with IT, business partners, and working with internal and external audits to assess security controls and compliance

Keywords:

Education: Additional qualifications that could help you succeed even further in this role include:

Master's degree in an Information Technology field from an accredited institution Proven experience in evaluating and advancing organizational cybersecurity maturity aligned with NIST CSF Implementation Tiers (Tier 1-4).

Three (3) years of Medical Device Post-Markt Experience Familiarity with global healthcare data privacy and security regulations, including FDA, HIPAA, and GDPR.

Skills include the ability to deal with ambiguity, the ability to lead an organization with multiple urgent demands, the ability to develop trust virtually and in person.

Performs complex research and analysis as well as investigates business needs with respect to information management. Perform complex Customer Cybersecurity Review of Solventum Product and Services. Design develop and support post-market product portfolio management including incident response, SBOM and product security vigilance.