Edwards Lifesciences is the global leader in patient-focused medical innovations for structural heart disease, as well as critical care and surgical monitoring. For more than 60 years, we have established a remarkable track record around that innovation: Work that enables clinicians around the world to enhance and save lives. We are experiencing massive growth, and this is your opportunity to make a big impact.

This is an exciting opportunity within Edwards Lifesciences’ IT organization to build a risk management system and establish procedures for our global organization. The Senior Manager, IT GRC, is a dynamic and execution-focused information security leader. Your role will be to drive the evolution of the information security risk management program at Edwards offering leadership for key cyber security functions like cyber compliance, governance, risk management and/or assurance. As the Sr Manager, you will lead a small team of engineers and architect, mentoring and coaching the team both as a people and technical leader.

This role requires hands-on security experience to drive information security initiatives in Governance, Risk and Compliance space. You must understand complex technical security concepts and explain them in a business-friendly manner and work in close partnership with various IT groups, audit functions, legal, business units, and our medical device R&D division.

Specific Responsibilities

Must work on-site in Irvine Global HQ one day per week.
Understand key business processes at Edwards and their characteristics with a view to incorporating security guidance that enables the business operations.
Manage and develop information security staff serving as a technical and people mentor, expert at bringing clarity where there is ambiguity to help the team succeed.
Design processes and governance structure around cyber security solutions
Lead the design and operation of related compliance monitoring and improvement activities to ensure compliance with internal security policies and applicable laws and regulations.
Lead Information security risk assessments and associated controls
Own the lifecycle of technologies and services in compliance with company policies.
Act as a SME Security Advisor for key IT, product, and business initiatives
Provide oversight of security awareness and training program
Have a good understanding and be able to lead risk lifecycle management.
Establish and lead governance metrics for Information Security program.
Run Security Architecture governance Enterprise program.
Lead Vendor Risk Management Enterprise program.
Provide oversight to data profiling, governance and risk remediation.
Present to executive audience the most complex security concepts in a business-friendly language.
Lead the development and maintenance of cyber security risk register that drives tactical, short term and long-term tasks and initiatives to improve the security posture of Edwards Lifesciences
Stay abreast with the cyber security threat and solution landscape to bring innovative solutions that significantly improve Edwards security posture.

Basic Requirements

Reside in Southern California area and work on-site at Global HQ in Irvine one day per week
Bachelor's Degree in in related field , 8+ years of previous related experience
7+ years experience in cybersecurity (5+ with a masters degree)
5+ years’ experience leading and executing projects in cybersecurity, governance, risk, or compliance
Hands-on experience building risk management systems and programs for organizations
2+ years of experience working as a team lead or a manager responsible for providing technical and or people leadership
Expert knowledge in industry standard security frameworks like NIST, OWASP, ISO etc.
Experience in a large, growing, global organization
Ability to collaborate in a very fast paced environment
Excellent written and verbal communication skills, with experience presenting to executive audience

Preferred

Medical Device experience or other highly regulated industry experience
Experience working with Manufacturing or Supply Chain
SME in at least 3 domains with medical device security being the primary – platform security, network security, application security, data security, cloud security, embedded device security, risk management, governance and compliance.
Prior experience in design/build/execution of a medical device program is a must along with strong familiarity working with FDA guidelines specific to medical devices.
Experience leading and executing enterprise scoped security projects in at least 3 or more domains out of platform security, application security, network security, infrastructure, cloud security, data security and identity and access management.

Aligning our overall business objectives with performance, we offer competitive salaries, performance-based incentives, and a wide variety of benefits programs to address the diverse individual needs of our employees and their families.

For California, the base pay range for this position is $128,000 to $181,000 (highly experienced).

The pay for the successful candidate will depend on various factors (e.g., qualifications, education, prior experience).

Edwards is an Equal Opportunity/Affirmative Action employer including protected Veterans and individuals with disabilities.

COVID Vaccination Requirement

Edwards is committed to complying with the requirements and guidance from our government authorities and to protecting our vulnerable patients and the healthcare providers who are treating them around the world. As such, all Healthcare Interacting positions require COVID-19 vaccination, which includes anyone who directly interfaces with patients and those who interact with healthcare providers as part of their role. If hired, as a condition of employment, you will be required to submit proof that you have been fully vaccinated for COVID-19, unless you request and are granted a medical or religious accommodation for exemption from the vaccination requirement. This vaccination requirement does not apply in countries where it is prohibited by law to impose vaccination. In countries where vaccines are less available, or other requirements exist, we may institute alternate measures that optimize patient safety and healthcare provider safety, which may include regular COVID testing or specific masking requirements.

Edwards Lifesciences

New Jobs

Manager, Information Security (GRC)