Dexcom - P3 Security & Privacy Compliance Analyst - Cyber Security

The Company :

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream : To forever change how diabetes is managed. We are broadening our vision beyond diabetes to empower people to take control of health.

The Role :

The R&D Cybersecurity team is a high-growth, fast-paced environment where you work with leading-edge software teams to ensure the security of modern diabetes medical device systems. You will be responsible for learning and reviewing our products end to end, identifying potential risks and gaps, and seeing them through completion.

What you will do :

- Collaborate with cross-functional teams to ensure cybersecurity and privacy compliance is represented in processes.

- Facilitate the completion of security compliance questionnaires for vendors and partners.

- Ensure compliance with standards like FedRAMP, NIST, SOC2, ISO 27001, ENS, and EU MDR throughout the product development lifecycle.

- Analyze newly released or revised regulations and standards to identify compliance gaps.

- Collaborate with program managers and product owners to ensure corrective actions are taken.

- Maintain documentation in support of continual compliance, working with Legal, Quality, and Regulatory teams.

- Present documentation as proof of compliance during internal or external audits.

- Work with peer stakeholders in Engineering, Legal, Privacy, Commercial, Marketing, Sales, Quality Compliance, and Regulatory Affairs.

- Partner with subject matter experts to ensure risk mitigation activities are well documented.

What makes you successful :

- Excellent communication skills and strong collaboration.

- Extensive experience with standards including FedRAMP, NIST 800-53, NIST CSF, ISO 27001, SOC2, GDPR.

- Sharp problem-solving aptitude.

- Technical knowledge of cybersecurity and privacy standards within the Medical Device field or other regulated industries.

- Experience in end-to-end audit and compliance evaluation for third parties, vendors, and partners.

- Experience in highly regulated industries such as healthcare, banking, and finance is preferred.

- Candidates must be able to start within 30 days of notice period (non-negotiable).

- Onsite Work : 4x week in the local India office.

Experience and Education :

- Bachelor's degree and a minimum of 5 - 8 years of related experience.