Senior Software Product Security Engineer • Product Security Engineering

Product Security QMS Technical Expert

Work Flexibility: Hybrid

This role will establish technical expertise for the Product security QMS in collaboration with Design Quality Digital group for Stryker T&E digital product portfolios (Trauma, Foot & Ankle, Upper Extremities). The position requires a strong partnership with product Development teams to ensure time-to-market, customer requirements, and technology objectives are met while ensuring compliance with global quality and regulatory requirements related to Product security. Will support the process owner – Product Security in establishing, implementing, and maintaining Global Regulatory and Quality processes and documents supporting our Global QMS and the divisional QMS.

What You Will Do:

• Assist in the facilitation of internal and third-party audits as needed.
• Should be capable of interpreting industry standards and government regulations to drive the implementation of world-class processes that may provide resources and/or help to remove obstacles to team accomplishments.
• Should have Design Controls expertise for product development projects from inception through successful Design
• Should have a basic understanding of product security & Risk Management strategies.
• Recommend efficiency and process improvements to product security capabilities and functions.
• Collaborate with product teams to assess security risks. Able to clearly convey design control and Product Security-related issues to stakeholders.
• Creating Gap assessment between different processes and fulfilling the Gaps
• Communicate the security gaps to leadership and propose mitigation solutions.

What You Need:

• 5-8 years. Basic level Expertise in applying security control frameworks, security risk assessments, and scoring the severity of security threats and vulnerabilities.
• Effective verbal and written communicator and consensus-builder
• Demonstrated technical problem-solving skills. Strong QMS and SDLC (software development life cycle) understanding.
• Basic Understanding of the vulnerability management life cycle. Experience of working in a regulated medical organization.

Good to have:

• ISO 13485 standard. Experience in New Product Development for Software and/or Systems preferred
• FDA Cybersecurity guidance (including FD&C 524B and eSTAR updates)
• Hands on experience in using Agile methodology.
• Understands security risk management processes preferably in the healthcare or medical device industry

Travel Percentage: None