Senior GCP Security Engineer

Key Responsibilities • Assess existing security architecture and practices for digital and cloud environments, identifying gaps and improvement areas. • Define and recommend integration strategies with IT systems and broader enterprise ecosystems. • Develop and drive regulatory compliance roadmaps, including standards such as ISO, SOC 2 Type II, and SOC 3. • Support onboarding of hospitals and clinics into the Medtronic portal and digital ecosystem by ensuring adherence to security requirements. • Identify common compliance-related queries from healthcare providers (HCPs) and design automated response mechanisms. • Perform threat modeling and risk assessments for digital and cloud platforms. • Conduct vulnerability assessments, including signal monitoring and risk identification. • Implement and align cybersecurity standards and frameworks such as NIST, SOC 2, GDPR, and ISO. • Design and maintain secure architecture for digital and cloud ecosystems. • Manage security risk assessment and vulnerability management processes. • Support customer security requirements, including responding to compliance questionnaires, providing demonstrations, and integrating security controls. Mandatory Skills & Expertise • Application Security (SAST, DAST, Secure Coding) - Expert, hands-on experience required • OWASP Tools & Practices - Expert, strong knowledge of OWASP Top 10 • NIST Security Framework - Expert, implementation & compliance experience Preferred Skills • Experience with healthcare or medical device industry security requirements • Familiarity with cloud platforms (Azure, AWS, Google Cloud Platform) security architecture • Strong understanding of GDPR and data privacy regulations • Excellent communication and stakeholder management skills Qualifications • Bachelor&s or Master&s degree in Computer Science, Information Security, or related field • Relevant certifications such as CISSP, CISM, CEH, or equivalent are preferred For applications and inquiries, contact: [email protected]