Senior Product Security Governance Lead

At Alcon, we are driven by the meaningful work we do to help people see brilliantly. We innovate boldly, champion progress, and act with speed as the global leader in eye care. Here, you’ll be recognized for your commitment and contributions and see your career like never before. Together, we go above and beyond to make an impact in the lives of our patients and customers.

We foster an inclusive culture and are looking for diverse, talented people to join Alcon and we are looking for a Senior Product Security Governance Lead in Lake Forest, CA.

In this role, a typical day will include:

• You will be responsible for developing, implementing and maintaining robust security measures across all stages of our product development and post launch process.

• You will collaborate with cross-functional teams to integrate security best practices and ensure the protection of our products against potential threats.

• Develop, Implement and enforce security best practices throughout the entire software development lifecycle (SDLC)

• Helping in getting different certifications for medical products.

• Help in conducting security awareness training for development teams to enhance their understanding of security and privacy principles and practices.

• Stay updated on the latest security trends, regulatory standards, vulnerabilities, and mitigation strategies.

• Perform and/or support periodic table-top exercises as directed, create or reviewing final reports.

• Write and/or review product security and privacy communication and/or update communications to internal stake holders.

• Summarize product risks for biannual stakeholder reports.

• Interact with outside vendors, write/modify/convey host module requirements, and be able to identify and hold outside vendors accountable for their deliverables.

• Help in getting the certifications like UL-2900 for Alcon products.

• Update and Develop product security processes for medical and non-medical devices.

• Creating trainings for product security processes for medical and non-medical devices.

• Building Co-ordinated Vulnerability Management processes and program.

• Building and developing common automated scripts and tools as applicable.

• Knowledgeable of product security landscape.

• Review and conduct gap assessment of different regulatory standards. Lead efforts to close the gaps in Alcon’s product security related standard procedures.

• Build strong collaboration with cross-functional stakeholders and teams across the product development lifecycle.

• Contribute to analyzing risks, assessing security gaps, and recommending state of the art solutions.

• Provides accurate documentation of metrics and KPIs, and security process results for management and stakeholders.

• Works closely with the Lake Forest Product Security and Software teams and stake holders both on-shore and off-shore to coordinate QA oversight of software development activities and associated deliverables.

• Supports audits, regulatory and other compliance activities by coordinating efforts for providing requested information and supporting documentation as required for changes in regulatory requirements.

• Communicate with customers and stakeholders concerning discovered vulnerabilities.

• Supporting incident response processes and PSIRT as required in addressing the identified incidents as necessary.

• Works closely with the Product Security team to support product security activities and associated deliverables.

• You will be responsible for developing, implementing and maintaining robust security measures across all stages of our product development and post launch process.

• You will collaborate with cross-functional teams to integrate security best practices and ensure the protection of our products against potential threats.

• Develop, Implement and enforce security best practices throughout the entire software development lifecycle (SDLC)

• Helping in getting different certifications for medical products.

• Help in conducting security awareness training for development teams to enhance their understanding of security and privacy principles and practices.

• Stay updated on the latest security trends, regulatory standards, vulnerabilities, and mitigation strategies.

• Perform and/or support periodic table-top exercises as directed, create or reviewing final reports.

• Write and/or review product security and privacy communication and/or update communications to internal stake holders.

• Summarize product risks for biannual stakeholder re