Senior Cybersecurity Manager – Protecting Lives Through Innovation
Location: Edinburgh, Scotland (within 30 Miles of Spacelabs office)
Department: Privacy & Security Program
Employment Type: Full-Time, Permanent
Why Spacelabs?
The Spacelabs Privacy and Security Program is a shared service model with responsibility for Cybersecurity and Privacy by Design, Compliance, Security Testing and Incident Response. As a Spacelabs SR Cloud Cybersecurity Engineer, you are responsible for cybersecurity and privacy functions for our Products. This role collaborates with Spacelabs Cloud Product Project Teams to ensure product privacy and security posture. This role is a trusted collaborator of the Project Teams and works closely with Engineering and Quality/Regulatory functions. This role includes managing Cybersecurity Team members.
About the Role
As Senior Cybersecurity Manager, you’ll be the guardian of our products’ security and privacy posture. You’ll lead initiatives that ensure Confidentiality, Integrity, and Availability across our cloud-based solutions, collaborating with cross-functional teams to embed Privacy and Security by Design into every product.
This is more than a technical role—it’s a mission-critical position where your expertise directly impacts patient safety and trust.
What We’re Looking For
Responsibilities
Key Accountabilities include but are not limited to:
- Represent the Spacelabs Cybersecurity and Privacy Team
- Responsible for leading Product cross functional team members to complete all technical aspects of cloud product cyber security tasks and initiatives; be the “Product Owner” for Cybersecurity.
- Ensure the Confidentiality, Integrity and Availability of Spacelabs Cloud Products and solutions
- Lead the cloud Cybersecurity and Privacy by Design and by Default for the assigned projects.
- Represent cyber security with the product development teams to ensure cyber security and privacy is being designed into products.
- Represent cybersecurity and privacy in the Risk Assessment. as a subject matter expert including:
- cybersecurity threat management process
- continuous technical analysis and monitoring of cyber security signals.
- Lead customer cybersecurity and Privacy assurance. This includes Product Security communications content such as:
- Product Labeling
- completion of security inquiries
- complaint and vulnerability reports
- provide consistent cybersecurity and privacy guidance to Spacelabs and Customer
- Lead Cybersecurity and Privacy Complaint Event and Incident Investigations for assigned projects.
Qualifications
Min Knowledge & Experience required for the position:
- 10+ years of Cybersecurity Engineering
- 5-10 years of Cloud Security Experience (AWS preferred)
- 5 years’ experience leading product cyber security projects and risk management activities – in medical device or healthcare domain (preferred)
- Experience in cross-functional cyber security activities including Product Defense in Depth, security technology, regulatory compliance and incident response
- Domain specific standards and approaches on privacy and product security (ISO 2700x, NIST 800 Series Special Publications)
- Knowledgeable and experience with laws and regulations on cyber security, privacy, data protection and breach notification (e.g.: FDA cyber security guidelines, 95/46/ED, HIPAA, GDPR, ISO 13485, ISO 14971. ISO 27001/27017/27018, ISO 30111; AAMI TIR 57; 21CFR820, SB1386, etc.)
- Experience in designing or leading software products using Secure SDLC
- Thorough Understanding of securing and hardening Windows and Linux operating systems
- Thorough understanding of networking and network security
- Thorough understanding of Operating Systems, Operating Systems Security (e.g. hardening)
- Thorough understanding of Web Server Security
- Thorough understanding of Database Security
- Thorough understanding of Cloud Design and Architecture
- Thorough understanding of Security by Design and by Default for Cloud solutions (infrastructure, Application and Operational Security)
- Thorough understanding of AWS Cloud Security Best Practices
- Cyber security training and certification such as CISSP/CISM/CISA, Security +; Cloud Security Alliance, SANS Cloud Security
- Bachelor's Degree plus a minimum of 15 years of related experience or Master's Degree plus a minimum of 10 years of related experience or waiver based on experience.
- Degree should be in technical discipline such as Computer Science-Information Security or Cybersecurity or Software Engineering.
What We Offer
- A chance to make a real impact in healthcare technology
- Collaborative, mission-driven culture
- Competitive compensation and benefits