Product Security Specialist for Medical Devices (Cyber Security)
PA Consulting10 months ago
London, United KingdomSenior
Responsibilities
- Determine objectives, scope, timelines, and delivery methodologies for product security initiatives with client product and functional teams.
- Assess security risks across medical-device and product portfolios and recommend remediation strategies while balancing business and technical requirements.
- Advise on coding practices, threat modeling, and security testing for embedded systems and IoT devices while supporting regulatory compliance.
- Lead secure code reviews, threat modeling, security risk assessments, vulnerability assessments, and validation and verification of controls with client R&D teams.
- Monitor emerging cybersecurity threats in the IoT and medical-device landscape and produce thought leadership.
- Build stakeholder relationships, foster team growth and training, manage projects, solve problems through a consulting approach, and support business development.
Requirements
- At least 5 years of relevant experience in the medical-device industry or through consulting or service-provider work.
- Proficiency with NIST, OWASP, MITRE ATT&CK, PASTA, and STRIDE, as well as standards and regulations including FDA cybersecurity guidance.
- Experience assessing security risks using penetration-test results, threat modeling, and security testing, and determining residual risk after compensating controls are applied.
- Experience implementing and demonstrating compliance with NIST, IEC, HITRUST, HIPAA, GDPR, ISO 27001, and SOC 2 Type 2, with familiarity working with Quality Management Systems.
- Experience working with teams in a structured software development lifecycle process.
- Cybersecurity qualifications such as CISSP, CSSLP, or CISM are expected or valued.
- Strong written and verbal communication, analytical problem-solving, stakeholder collaboration, relationship-building, proposal development, and client business-development skills.
- Applicants for applicable UK roles must meet Baseline Personnel Security Standard and, where required, higher UK security-clearance residency requirements.
Benefits
- Hybrid working with a minimum of two days per week in the office or on a client site, with assignments potentially requiring up to five days per week on a client site.
- Budget for technical and non-technical courses and certifications, plus access to coaching, mentoring, and peer knowledge-sharing.
- Private healthcare for employees and families, 25 days of annual leave plus a bonus half day on Christmas Eve, and the option to buy five additional days.
- Generous company pension scheme, annual performance-based bonus, PA share ownership, and tax-efficient benefits including cycle to work and give as you earn.
- Opportunities to participate in community and charity initiatives and access to physical, emotional, social, and financial wellbeing support.
Categories
About PA Consulting
PA Consulting is a management and technology consultancy that designs and delivers strategy, digital systems, and physical products for public- and private-sector clients. It works across defense and security, government, health and life sciences, financial services, energy and utilities, consumer, and transport markets. Founded in 1943 and headquartered in London, it operates globally and is majority-owned by Jacobs.