Senior Product Cybersecurity Specialist
About this role
Mirion is seeking a motivated and enthusiastic Senior Product Cybersecurity Specialist to support Mirion’s medical and technologies product lines. The specialist will play a crucial role providing cybersecurity advisory services and HIPPA guidance to product owners, sales teams, and developers in the form of providing security guidance, reviews, and compliance information. Additionally, this role will build out processes and technical capabilities as assigned to support the Product Cybersecurity mission.
Primary Responsibilities
- Support cybersecurity risk assessments for connected medical devices and software per US HHS and FDA guidance.
- Provide cybersecurity recommendations and guidance to product development teams on secure design, coding, and development.
- Assist with gathering evidence and providing information for external audits and customer security inquiries for HIPPA and ePHI related security controls and for frameworks such as ISO 27001 and SOC 2.
- Document and write product risk assessment and security control reports.
- Review and aid with writing cybersecurity related information for product documentation.
- Participate in product project meetings as the cybersecurity representative.
- Collaborate with cross-functional teams to ensure cybersecurity best practices are integrated into product development and support.
- Stay informed about the latest cybersecurity threats, vulnerabilities, and industry’s best practices.
Potential Additional Responsibilities
- Participate in routine code vulnerability scans and triage activities.
- Assist in implementation and creating procedures around the use of developer code security technologies including SAST, SCA, and DAST tools.
- Coordinating penetration testing and other application security testing.
- Other general tasks as assigned.
Required Qualifications and Experience
- Bachelor’s degree in information technology, information security, or related field or equivalent practical experience.
- Experience: 4+ years in a cybersecurity-focused role, with exposure to cybersecurity governance, risk, and compliance.
- Working knowledge of the HIPAA Security Rule (45 CFP Part 160/164) and Privacy/Breach Notification Rules.
- Familiarity with FDA's "Cybersecurity in Medical Devices" premarket/postmarket guidance.
- Familiarity with cybersecurity frameworks such as ISO 27001, IEC 62443, NIST 800-171, SOC 2, and Cyber Essentials.
- Experience with HIPPA regulations and the HITRUST security framework.
- Experience with software application architecture and secure software development practices.
- Experience with embedded systems and associated security considerations.
- Good understanding of cybersecurity concepts and best practices to secure hardware and software components.
- Strong communication skills and a collaborative working style.
- Desire to work and learn.
Desired Qualifications and Experience
- Familiarity with international cyber industry regulations such as EU GDPR, and EU Cyber Resilience Act.
- Understanding of SBOM concepts and code/application vulnerability management tools.
- Experience with secure coding practices.
- Experience with Azure and AWS cloud security.
Company at a glance
Mirion (NYSE: MIR) is a global leader in radiation safety, science and medicine, with a diverse portfolio of products and services that protects people and the planet from the harmful effects of ionizing radiation and accelerates innovation across a diversity of end markets. The Mirion Technologies group provides proven radiation safety technologies that operate with the highest levels of precision – from R&D labs, to critical nuclear facilities, and on the front lines. The Mirion Medical group solutions enhance the delivery and ensure the safety of healthcare, powering the fields of Nuclear Medicine, Radiation Therapy QA, Occupational Dosimetry, and Diagnostic Imaging. In collaboration with our customers, Mirion empowers innovations that deliver vital protection and harness the transformative potential of ionizing radiation to shape our future world.
Beware of Scammers Posing as Mirion
Please be wary of potential job scams or suspicious recruitment activities by individuals posing as Mirion recruiters or employees. If you suspect that a job offer from Mirion might be fraudulent or that the recruiter is not genuine, please verify by checking for the posting on the official Mirion Careers sites. Visit mirion.com/careers for further details.
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?