Cyber Security Manager

About the role

Medela is looking for a Cyber Security Manager to lead product cybersecurity across its connected medical devices and digital services. The role sits within the R&D team and combines strategic governance with hands‑on technical work.

Key responsibilities

• Define and maintain the cybersecurity strategy, governance framework, roadmap and priorities for embedded software, mobile apps, cloud services, APIs and data flows.
• Conduct threat modelling, risk assessments, control definition and residual risk evaluation, and represent cybersecurity in architecture and design reviews.
• Coordinate vulnerability management, penetration testing, security verification and remediation activities.
• Own cybersecurity documentation, regulatory evidence, SBOMs and technical file contributions, and drive post‑market monitoring and incident response.

Required profile

• Degree in Computer Science, Software Engineering, Electrical/Biomedical Engineering, Cybersecurity or related field.
• Proven product cybersecurity experience, preferably in medical devices, IoT or other regulated environments.
• Strong communication skills and ability to influence stakeholders without direct authority.

Required skills

• Threat modelling and vulnerability assessments.
• Software Bill of Materials (SBOM) creation and management.
• Secure development lifecycle and security testing.
• Post‑market cybersecurity monitoring and incident response.
• Knowledge of IEC 81001‑5‑1, IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity guidance, EU MDR, IEC 62443, ISO 27001 and GDPR.