Product Security Analyst

Requisition ID:  33303  

 

At Terumo Blood and Cell Technologies, our 7,000+ global associates proud to come to work each day, knowing that what we do impacts the lives of patients around the world. For Terumo, for Everyone, Everywhere.

 

We make medical devices and related products that are used to collect, separate, manufacture and process various components of blood and cells. With our innovative technologies and service offerings, we touch a patient’s life every second of every day and are committed to continuing to increase the number of patients we serve. Advancing healthcare with heart.

 

 

With some of the best and brightest minds in the industry, an unmatched global footprint, comprehensive benefits and a distinct culture, Terumo Blood and Cell Technologies is a great place to work, grow and be part of a team that is focused on making a difference. Join us and help shape wherever we go next. You create your future and ours.

Product Security Analyst

 

JOB SUMMARY

 

Work independently to provide security support for product lifecycle activities, industry information sharing and coordinated disclosure activities for Terumo Blood and Cell Technologies medical device and software products. Participate in a highly collaborative and diverse environment working closely with partners throughout the company and with the information security professional community of practice, particularly as it relates to medical devices and the healthcare ecosystem.

 

ESSENTIAL DUTIES

• Consults on the implementation and configuration of cybersecurity capabilities for Terumo Blood and Cell Technologies products, the application of cybersecurity requirements for those products, the implementation of mitigation of cybersecurity defects and risks, and project deliverables such as threat modes and project plans.
• Works with the Research & Development product teams on projects, executes product security capabilities such as threat intelligence, scanning (SAST, DAST, SCA, Network), and coordination of penetration testing with certified 3rd parties, maintains the product security test lab environment, and does research and education to keep current on cybersecurity topics.
• Facilitates risk management activity, such as risk management reports, and risk / vulnerability reporting.
• Engages oversight when a deviation from program requirements is identified.
• Performs product security incident response activities.
• Monitors industry threat intelligence feeds for cybersecurity issues in the healthcare industry
• Manages and monitors the Coordinated Vulnerability Disclosure process ensuring closed-loop feedback to security researchers and internal product development stakeholders.
• Collaborates with product teams for development of MDS2 forms to streamline the process for future customer inquiries.
• Accountable for customer risk & security assessments for all Terumo Blood and Cell Technologies products (devices and software solutions).
• Responsible for coordinating the customer notification process when global cybersecurity threats are identified.
• Work closely with the product security program leader to drive product security program initiatives forward.
• Provide escalation support for the commercial team (sales, technical support) for cybersecurity inquiries.

 

OTHER DUTIES AND RESPONSIBILITIES

• May be required to travel to other company locations on occasion.

 

MINIMUM QUALIFICATION REQUIREMENTS

 

Education

Bachelor’s degree or, equivalent of education and experience sufficient to successfully perform the essential functions of the job may be considered.

Experience

Minimum 5 years’ experience