Cybersecurity Vulnerability Analyst

Role: Cybersecurity Vulnerability Analyst Location: REMOTE Duration :12 months ONLY ON W2 Required Skills - Risk Assessment - Vulnerability Scanning - Information Auditing - Documenting - HIPAA assessment experiences is a BIG PLUS HEALTHCARE EXPEIRNCE IS A PLUS Basic Qualifications Additional Skills Staff Product Security Engineer - Vulnerability Manager The Product Security team within Johnson & Johnson’s Information Security & Risk Management (ISRM) is recruiting for a full-time Staff Product Security Engineer to join the ISRM Product Security-JJSV team to provide support to Johnson & Johnson Surgical Vision (JJSV) R&D. This position is located in Milpitas, CA. Caring for the world, one person at a time has inspired and united the people of Johnson & Johnson for over 125 years. We embrace research and science -- bringing innovative ideas, products, and services to advance the health and well-being of people. With $82.1 billion in 2020 sales, Johnson & Johnson is the world's most comprehensive and broadly based manufacturer of health care products, as well as a provider of related services, for the consumer, pharmaceutical, and medical devices markets. Employees of the Johnson & Johnson Family of Companies work with partners in health care to touch the lives of over a billion people every day, throughout the world. If you have the talent and desire to touch the world, Johnson & Johnson has the career opportunities to help make it happen. Position Summary The Staff Product Security Engineer will be responsible for implementation of J&J’s enterprise Product Security strategy and framework throughout Johnson & Johnson Surgical Vision (JJSV) medical device portfolio. This includes identifying key strategy and goals, collaborating with internal organizations on existing process and policy enhancements, creating and communicating metrics to senior management, identifying communications plans and raising overall awareness of the capability. Specific responsibilities include supporting JJSV R&D in post market responsibilities for JJSV’s marketed devices include monitoring for new vulnerabilities, leading cross-functional risk assessment, assisting with patching and remediation plans, as well as responding to all customer security questionnaires and reviewing security language within contractual agreements. Major Duties & Responsibilities Support Global Product Security’s framework :• Help drive Product Security strategy and goals within JJSV • Partner with internal organizations to improve existing processes and policies • Create and present Product Security metrics to senior management Help carry out Product Security governance model for post market devices. Security compliance assessment and recommendation of remediation plans. Respond to customer questionnaires and contractual language. Perform other work-related duties as assigned. Qualifications • Minimum of a Bachelor’s degree is required. • A minimum of 6 years of experience in cybersecurity, engineering, or QA is required • Ability to create and deliver Product Security awareness campaigns and other communications is required • Must possess understanding of vulnerability scanning, CVSS and/or other general security testing principles. • Understanding of cybersecurity risk management is required • Understanding of Windows operating system security patching is required • Knowledge of cybersecurity standards and regulations applicable to medical products (HIPAA, EUMDR, ISO 13485, IEC 60601-1, IEC 62304, ISO 14971, AAMI TIR 57, UL 2900-1, FDA guidance, ISO 27000 Series) is preferred • Ability to work on Product Security documentation and generate metrics is required • Ability to work autonomously and proactively seek out security opportunities within JJSV will be required • Must be results oriented and ability to drive to timelines • Excellent interpersonal skills are required • Excellent communication and collaboration skills, able to network, interact and influence at all levels of the organization, cross sector, cross-functionally and globally is required • Must possess consistent record to influence/collaborate to get to desired result, and strong leadership skills are required • This role can be located in Irvine, CA or Milpitas, CA and may require up to 10% travel __ _ _ Thanks & Regards, Suganya S / US IT RECRUITER Thought wave Software and Solutions 314 N. Lake St, Suite 6, Aurora IL 60506 Desk: 6303134033 Email:suganya@thoughtwavesoft.com LinkedIn: https://www.linkedin.com/in/suganya-s-873a8915a/