Tasks:
- * Develop and maintain cybersecurity policies standards and procedures
- * Embed security throughout the software development lifecycle
- * Lead the cybersecurity program for a cloud-based medical software platform
- * Maintain compliance with applicable security standards and privacy regulations
- * Maintain reusable security assessment responses and evidence
- * Maintain security posture across AWS accounts, environments, and regions
- * Monitor, triage, and review system vulnerabilities
- * Operate SIEM, CSPM, and observability tools
- * Own and maintain GRC platforms and processes
- * Provide cybersecurity guidance and reusable security patterns to engineering teams
- * Respond to customer and hospital security assessments and questionnaires
- * Review and maintain IAM and least-privilege access
- * Review cloud and system architectures for security risks
- * Support security testing and analysis, including SAST, DAST, dependency, and container analysis
- * Track security findings, corrective actions, and remediation
Perks/Benefits:
Skills/Tech stack required:
[Application Security] [Architecture Review] [Australian Privacy Principles] [AWS] [Cloud Security] [Container Security] [Container security analysis] [Control Frameworks] [CSPM] [Cybersecurity] [Cybersecurity risk] [Cybersecurity Risk Management] [DAST] [Dependency analysis] [GDPR] [Governance Risk] [Governance Risk and Compliance] [Governance Risk and Compliance (GRC)] [Identity and access] [Identity and Access Management] [Identity and Access Management (IAM)] [IEC 62304] [Incident Response] [Infrastructure as Code] [Infrastructure as Code (IaC)] [ISO 13485] [ISO 27001] [Least Privilege] [Least-privilege access] [NIST CSF] [NIST Cybersecurity] [NIST Cybersecurity Framework] [NIST Cybersecurity Framework (NIST CSF)] [POPIA] [Privacy principles] [Privilege Access] [Product security] [Risk and compliance (GRC)] [Risk Management] [SAST] [Secure Software] [Secure Software Development] [Security Analysis] [Security Architecture] [Security architecture review] [Security Assessments] [Security Control] [Security Control Frameworks] [Security Questionnaires] [SIEM] [Software as a Medical Device] [Software as a Medical Device (SaMD)] [Software as a Medical Device (SaMD) security] [Software development] [Vulnerability Management] [Web Application] [Web application security]
Educational requirements:
N/A
Role(s):
[Application Security] [Application Security Engineer] [Cloud Security Engineer] [Cybersecurity Engineer] [Engineer] [Product Security] [Product Security Engineer] [Security Engineer] [Senior Cybersecurity] [Senior Cybersecurity Engineer]