We anticipate the application window for this opening will close on - 2 Dec 2025

 

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

The Cyber Security Architect & Engineering Director has responsibilities for defining, developing, and overseeing the implementation of the enterprise cybersecurity architecture and engineering functions. This role serves as the primary technical expert, ensuring that security controls and protections are integrated into systems, networks, and applications to facilitate safeguarding of organizational assets from internal and external threats. This position will work with senior leadership to define the strategic vision for the security architecture roadmap, lead a team of security professionals, and act as a key liaison to senior leadership and business units on security risks and remediations.

This position is an exciting opportunity to work with Medtronic's Diabetes business. Medtronic has announced its intention to separate the Diabetes division to promote future growth and innovation within the business and reallocate investments and resources across Medtronic, subject to applicable information and consultation requirements. This separation provides our team with a bold opportunity to unleash our potential, enabling us to operate with greater speed and agility. As a separate entity, we anticipate leveraging increased investments to drive meaningful innovation and enhance our impact on patient care.

Responsibilities may include the following and other duties may be assigned.

• Develop security requirements and implementation guidance based on analysis of established security control frameworks and industry best practices to accommodate the needs of the business and business functions.

• Oversee the planning, design, deployment/implementation, configuration, fine-tuning, monitoring, and ongoing maintenance of critical security technologies to safeguard access to resources, networks, computer systems, and data. Example: SIEM, SOAR, EPP/EDR, MFA, Vulnerability Monitoring & Management, DLP, etc.

• Identify security risks and control gaps within existing systems and processes, and recommend effective corrective architecture, integrations, and controls.

• Serve as the cybersecurity Subject Matter Expert, providing guidance and consulting services to IT teams, business units, and internal/external partners.

• Lead and participate in operational support and incident management activities.

• Train, coach, and mentor a team of security professionals, providing guidance and goals to foster a team-focused culture.

Required Qualifications

Requires a Bachelor's degree and minimum of 10 years of relevant experience with 7+ years of managerial experience, or advanced degree with a minimum of 8 years of relevant experience with 7+ years of managerial experience.

Preferred Technical Skills

• Security architecture frameworks (SABSA, TOGAF, NIST CSF, Zero Trust).

• Network design & security (firewalls, segmentation, VPNs, SDN).

• Cloud security (AWS, Azure, GCP architectures, IAM, KMS, logging).

• Identity & access management (SSO, MFA, federation, privilege models).

• Threat modeling (STRIDE, MITRE ATT&CK).

• Application security principles (secure coding, API security).

• Understanding of cryptography, PKI, certificates.

• Experience with SIEM, EDR/XDR, DLP, WAF, and other enterprise tools.

• Firewalls, intrusion detection/prevention, endpoint protection.

• SIEM platforms (Splunk, Sentinel, QRadar, Crowdstrike SIEM).

• Cloud security tools (CSPM, CIEM, cloud firewalls).

• Vulnerability management tools (Nessus, Qualys, Rapid7).

• Scripting/automation (Python, PowerShell, Bash).

• Network protocols (TCP/IP, DNS, HTTP/S).

• Linux/Windows hardening, patch management.

• Container & DevSecOps security (Docker, Kubernetes, IaC).

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position. 

The physical demands described within the Responsibilities section of this job description are representative of those that must be met by a