Sr Cybersecurity Analyst

The Company

Dexcom Corporation (NASDAQ DXCM; Market Cap $44.3B) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by nearly 10,000 ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team: 

The Data Interoperability Solutions team is focused on developing and supporting the data interoperability solutions for Continuous Glucose Monitoring (CGM) devices in the healthcare space. This senior professional role will be driving the cybersecurity questionnaire support globally for Dexcom in support of our data interoperability solutions suite. This role reports to the Director of Data Interoperability Solutions. 

Where you come in:

As a Senior Cybersecurity Analyst, you will be responsible for completion of all cybersecurity assessments for medical devices and medical device interoperability solutions globally. You will also conduct process evaluation activities to ensure compliance with current regulations and company policies and procedures. You will document lessons learned and work with multiple stakeholders (internal and/or external) to ensure deliverables are accurate, complete/on time. You will partner with legal, cybersecurity, engineering, and business teams and analyze cybersecurity questionnaire requirements to support the response knowledge database, ensuring optimal use of existing tool sets. You will work with Dexcom’s HIPAA Privacy and Security Officers to help identify any technical cybersecurity and HIPAA gaps and drive plans for improvement. You will proactively assess security control documentation, such as the MDS2 and security packets (technical, operational, procedural) for alignment with the U.S. and international regulatory interoperability requirements (e.g., NIST CSF, HIPAA, HITRUST, PCI, GDPR, etc.). You will develop and document remediation guidance, develop and implement corrective action plans based on assessment findings and identified vulnerabilities, analyze and report on various interoperability standards and regulations, and contribute to development of interoperability strategy. 

What makes you successful:

Required Qualifications 

• Bachelor’s degree in a relevant technical area such as Healthcare Cybersecurity, Cybersecurity, Health Informatics, or Health Information Management, or equivalent. 
• AHIMA’s Healthcare Privacy and Security (CHPS) credential or equivalent. 
• Three to five (3-5) years of healthcare cybersecurity and HIPAA experience. 
• Hands-on experience with health information systems (HIS) cyber security tools, process, methodologies, and frameworks. 
• Experienced in working with or evaluating hospital cybersecurity questionnaires. 
• Intermediate knowledge of HIPAA, ISO-27001, and HITRUST standards as well as NIST controls. 

Preferred Qualifications 

• Master’s degree in a relevant technical area such as Healthcare Cybersecurity, Cybersecurity, Health Informatics, or Health Information Management. 
• ISC’s Certified Information Systems Security Professional (CISSP), or equivalent 
• Five to ten (5-10) years of hospital cybersecurity and HIPAA experience. 
• Hands-on experience with health information systems (HIS) cyber security tools, process, methodologies, and frameworks. 
• Expert in working with or evaluating hospital and health system cybersecurity questionnaires. 
• Advanced knowledge of HIPAA, ISO-27001, and HITRUST standards as well as NIST controls. 
• Technical leadership skills, ability to set priorities and meet obligations in a timely manner is a plus. 

What you’ll get:

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community. 
• A full and comprehensive benefits p