Hybrid Senior Cyber Information Assurance Analyst

at Medtronic

• Job title: Senior Cyber Information Assurance Analyst
• Job type: Full Time
• Experience level: Senior
• Salary: $104,000 - $156,000 per year
• Degree requirement: High School Diploma
• Tech skills: Cyber Security, ServiceNow
• Location requirements: Hybrid, Mounds View, United States

About the role

• Senior Cyber Information Assurance Analyst leading the identification, assessment, and mitigation of cybersecurity risks at Medtronic. Collaborating across teams to enhance cybersecurity posture in regulated environments.

Responsibilities

• Responsible for leading the identification, assessment, and mitigation of cybersecurity risks across the organization
• Provide expertise in risk management, compliance, and security strategy
• Collaborate with cross-functional teams to evaluate and enhance our cybersecurity posture
• Ensure adherence to relevant regulations such as HIPAA, GDPR, and other industry standards
• Drive improvements in the GRC platform by automating workflows, integrating new tools, and optimizing risk management processes

Requirements

• 4+ years of experience with a high school diploma or equivalent
• Previous Medtronic experience
• 7+ years of experience in cybersecurity GRC (Governance, Risk, & Compliance), or external/internal audit, preferably within the medical device or healthcare industry
• Strong understanding of cybersecurity frameworks, regulatory requirements, risk management, and industry best practices (e.g., HIPAA, NIST, ISO 27001, GDPR, etc.)
• Excellent communication and interpersonal skills, with the ability to interact effectively with both technical and non-technical stakeholders
• Ability to think critically and strategically about risk management and how technology, process improvements, and automation can help the organization proactively address cybersecurity risks
• Minimum 5 years of experience executing key risk management activities, including conducting risk assessments using various quantitative and qualitative methodologies, such as the FAIR model
• At least 3 years of active participation in the design and implementation of at least 2 comprehensive risk management programs (e.g., risk assessments, regulatory assessments) within a large, complex organization
• Strong knowledge of regulatory changes and trends impacting IT risk assessments, including compliance requirements such as GDPR, HIPAA, and others
• Familiarity with GRC tools such as ServiceNow, LogicGate, or OneTrust
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Information Security Auditor (CISA)

Benefits

• Health, Dental and vision insurance
• Health Savings Account
• Healthcare Flexible Spending Account
• Life insurance
• Long-term disability leave
• Dependent daycare spending account
• Tuition assistance/reimbursement
• Simple Steps (global well-being program)
• Incentive plans
• 401(k) plan plus employer contribution and match
• Short-term disability
• Paid time off
• Paid holidays
• Employee Stock Purchase Plan
• Employee Assistance Program
• Non-qualified Retirement Plan Supplement (subject to IRS earning minimums)
• Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums)