Product Security Analyst

Join Natus Sensory to start a new adventure in the medical device industry today and make a difference in someone's life. As a Product Security Analyst (Remote) at Natus, you will collaborate closely with global cross-functional teams to safeguard the confidentiality, integrity, and availability of Natus medical devices and services from information security threats and vulnerabilities. Your responsibilities will include supporting customer product security and privacy inquiries, conducting security and privacy product assessments, and contributing to the Natus secure development lifecycle by implementing new strategies, policies, procedures, and best practices. As the Subject Matter Expert (SME) on industry threat intelligence and best practices, you will be required to conduct research, stay updated on emerging security trends, threats, and technologies, and work with cross-functional teams to deploy solutions within Natus products. You will also be responsible for conducting Product Security Risk Assessments, creating Product Security Requirements based on risk assessment results and industry best practices, collaborating with Engineering teams on cybersecurity posture assessments, and working with Marketing, Sales, and Service to address customer inquiries, questionnaires, and risk assessments. Qualifications for the Product Security Analyst role include a Bachelor's degree from a four-year college or university, at least five years of related experience in Cybersecurity in a heavily regulated environment, demonstrated expertise in system security, security compliance, and securing developmental lifecycles, and knowledge of information security risk assessment methodologies and standards. You should possess strong communication skills to engage with technical and non-technical stakeholders, the ability to manage multiple work activities efficiently in a fast-paced environment, and proficiency in statistical analysis and reporting. It is preferred that you have developing knowledge of information security best practices, standards, guidelines, and frameworks such as NIST 800-53, NIST RMF, NIST CSF, FDA Pre-market, and Post-market Guidance for Cybersecurity in Medical Devices, HIPAA Security Rule, HSCC Joint Security Plan, AAMI TIR57, and ISO/IEC 27000 family. This is a work-from-home remote position with minimal travel requirements (less than 5%), offering a collaborative and international environment with different cultures. English is the company language at Natus Sensory.,