We anticipate the application window for this opening will close on - 20 Oct 2025

 

At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.

A Day in the Life

 
We value what makes you unique. Be a part of a company that thinks differently to solve problems, make progress, and deliver meaningful innovations.

The Cardiac and Vascular Group brings all of our cardiac and vascular businesses together into one cross-functional, collaborative operating unit to employ the full breadth of our talent, technologies, products, services, and solutions to address the needs of customers and patients across the globe. Cardiac Rhythm Management offers devices and therapies to treat abnormal heart rhythms, as well as cardiac monitoring solutions.
  
Be on the frontlines of the emerging area of medical device cybersecurity as an integral member and technical leader within a team responsible for creating, deploying, and monitoring cybersecurity and information security solutions for Medtronic’s medical devices and supporting IT infrastructure. Interact with external and internal cybersecurity researchers to identify and remediate vulnerabilities within Medtronic products and systems. Work directly with R&D teams to ensure all relevant security risks are identified and evaluated, and appropriate and well-balanced solutions are implemented.  Develop project security management deliverables for regulatory bodies to comply with standards / guidance documents, and successfully communicate cybersecurity technology to customers, regulatory bodies, and other stakeholders.

At Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. In-person exchanges are invaluable to our work. We are working onsite 4 days per week as part of our commitment to fostering a culture of professional growth and cross-functional collaboration as we work together to engineer the extraordinary. This role will require less than 10% of travel to enhance collaboration and ensure successful completion of projects. This position will be located in Mounds View, MN.

• Lead and mentor a diverse security team responsible for product and device-oriented cybersecurity activities, including risk assessment, mitigation, and residual risk acceptance in collaboration with R&D, architecture, and IT teams. 
• Develop, recommend, and implement security controls in conjunction with product R&D teams and processes,  for product/system-wide needs. 
• Build and maintain product security tools and processes for submission packaging and customer requirement tracking. 
• Oversee security monitoring, incident response, vulnerability assessments, mitigation implementation, and product-level intrusion detection activities. 
• Manage security-related deliverables for regulatory bodies, ensuring compliance with key standards and guidance. 
• Evaluate and test security risks on programs across the entire development lifecycle, including market-released products. 
• Support emerging cybersecurity certification initiatives. Drive the design and implementation of cybersecurity into our products and systems. 
• Additional Responsibilities and other duties may be assigned. 

Must Have: Minimum Requirements- To be considered for this role, please ensure the minimum requirements are evident in your applicant profile:

• Bachelors degree required
• Minimum of 7 years of relevant experience OR Master's degree with a minimum of 5 years relevant experience OR PhD with 3 years relevant experience.

Nice to Have:  

• Demonstrated understanding of information security practices, risk management processes, cybersecurity principles, and incident response methodologies 
• Demonstrated experience with security architecture, implementation, and monitoring of threats. 
• Demonstrated team management, leadership, and teamwork skills 
• Demonstrated ability to work in a matrixed responsibility and execution environment 
• Demonstrated experience interfacing with customers and other external stakeholders regarding cybersecurity system design and behavior 
• Demonstrated strong analytical, problem solving skills 
• CISSP or similar certification, or sufficient demonstrated experience and/or formal education in cybersecurity and information assurance.  
• Experience as an analyst, engineer, developer, researcher or architect with responsibility and/or demonstratable knowledge in two or more of the following areas: Web and/or Mobile Application security  
  • Cloud systems architecture and security 
  • Enterprise and loca