We anticipate the application window for this opening will close on - 22 Dec 2025

 

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

The Information Security Operations Director is responsible for supervising 24x7 cybersecurity operations and activities related to log analysis, incident response, threat hunting, use-case development, tuning, metrics, and security monitoring utilizing a wide array of security controls and toolsets. In addition, the Information Security Operations Director is responsible for developing, documenting, and administering processes, procedures, and guidelines in support of the duties and responsibilities of the team to enhance the capability of the cybersecurity operations program.

This position is an exciting opportunity to work with Medtronic's Diabetes business. Medtronic has announced its intention to separate the Diabetes division to promote future growth and innovation within the business and reallocate investments and resources across Medtronic, subject to applicable information and consultation requirements. This separation provides our team with a bold opportunity to unleash our potential, enabling us to operate with greater speed and agility. As a separate entity, we anticipate leveraging increased investments to drive meaningful innovation and enhance our impact on patient care.

Responsibilities may include the following and other duties may be assigned.

• Supervise the day-to-day running of VCA's Security Operations Center

• Develop and support strategic plans and projects to meet Security and SOC goals and objectives.

• Drive strategy and projects that increase the overall growth and maturity of the cybersecurity operations program

• Supervise and lead a team of cybersecurity professionals to include holding regular meetings to review initiatives, team goals and issues

• Develop, document, and administer processes, procedures, and guidelines in support of the duties and responsibilities of the team to enhance the capability of the cybersecurity operations program

• Responsible for collecting, analyzing, escalating, and responding to cyber security attacks using SIEM and EDR technologies

• Drive and develop use-case and proactive alert maturity in SIEM

• Develop reporting of Key Performance Indictors for Executive Oversight of threats and incidents, including incident response SLAs

• Ensures that Service Level Agreements are defined, tracked and met

• Fulfill other related duties as assigned

Required Knowledge and Experience: 
Requires a Bachelor's degree and minimum of 10 years of relevant experience with 7+ years of managerial experience, or advanced degree with a minimum of 8 years of relevant experience with 7+ years of managerial experience.

Preferred Qualifications:

• CISSP Preferred

• Advanced computer skills

• Ability to read, write, and speak English

• Demonstrated capability in leading IT Security transformational initiatives in complex, dynamic environments

• Experience with information security control management tools such as e-mail security, endpoint security, network security.

• Success in delivering projects designed to improve information security controls.

• Familiarity with cloud security best practices and cloud security monitoring tools.

• Understanding and knowledge of security standards/frameworks such as NIST CSF, PCI DSS, CIS, OWASP etc.

• Strong sense of self, ethics and effort, as well as the willingness to go the extra mile to achieve important goals

• Excellent collaboration and interpersonal skills. Must be able to communicate with all levels including influencing executive leadership.

• Experience with application security testing software and methodologies.

• Deep understanding of current and emerging IT Security technologies and practices, and how other enterprises are employing them

• Strong hands-on experience with security in public cloud platforms (AWS, Azure, GCP), Networking, Operating Systems, Software Development, IAM, Key Management, Encryption, SIEM, DLP and Endpoint Security.

• Experience with SIE