Cyber Security Architect
Boston, MA (Hybrid – 2 days on-site per week)
Salary Negotiable
Step into a career where technology safeguards life-changing medical innovations. At our global medtech company, we’re seeking visionary Cyber Security Architects to design and lead robust security strategies that protect our critical systems, patient data, and innovative technologies. If you’re ready to shape the future of secure healthcare, we’d love to hear from you.
Role Overview
As a Cyber Security Architect, you will play a pivotal role in designing and implementing comprehensive security architectures tailored to the medtech industry. This hybrid role requires two days per week at our Boston headquarters, with the flexibility to work remotely for the rest of the week.
Key Responsibilities
- Develop and maintain the enterprise-wide cybersecurity architecture to align with organizational goals.
- Evaluate, design, and implement security solutions to protect critical systems, devices, and data.
- Collaborate with engineering, IT, and compliance teams to ensure secure product development and deployment.
- Conduct threat modeling and vulnerability assessments, recommending strategies to mitigate identified risks.
- Stay ahead of emerging technologies and cyber threats, ensuring our defenses evolve proactively.
- Provide guidance and oversight on regulatory compliance (e.g., HIPAA, GDPR, FDA).
- Develop and deliver presentations to leadership, articulating the value and impact of security initiatives.
About You
We’re seeking a forward-thinking leader with a balance of technical expertise and strategic insight. Your ability to align security with business objectives is crucial.
Qualifications/Experience
- Bachelor’s degree in Cybersecurity, Computer Science, or a related field (or equivalent experience).
- 7+ years of experience in cybersecurity, with 3+ years in an architect or leadership role.
- Expertise in security frameworks and standards (e.g., NIST, ISO 27001).
- In-depth understanding of network, application, and cloud security, including AWS, Azure, or GCP.
- Knowledge of medtech regulatory requirements such as HIPAA, GDPR, and HITRUST.
- Strong experience with identity and access management (IAM), encryption, and data loss prevention (DLP).
- Relevant certifications such as CISSP, CISM, SABSA, or TOGAF are highly desirable.
- Excellent problem-solving skills and the ability to convey technical information to non-technical stakeholders.
***Due to the Christmas period, applications will be reviewed w/c 6th January 2025***