Dexcom - P4 Security & Privacy Compliance Analyst - Cyber Security

The Company :

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream : To forever change how diabetes is managed.

We are broadening our vision beyond diabetes to empower people to take control of health.

The Role :

The R&D Cybersecurity team is a high-growth, fast-paced environment where you work with leading-edge software teams to ensure the security of modern diabetes medical device systems.

As a member of the R&D Cybersecurity team, you will be responsible for learning and reviewing our products end to end, identifying potential risks, gaps, as well as seeing them through completion.

Responsibilities :

- Collaborate with cross-functional teams to ensure the interests of cybersecurity and privacy compliance is represented in the team's processes.

- Facilitate the completion of security compliance questionnaires for vendors and partners.

- Ensure compliance with cybersecurity and privacy standards like FedRAMP, NIST, SOC2, ISO 27001, ENS, and EU MDR throughout the product development lifecycle.

- Continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps.

- Collaborate with program managers and product owners to ensure corrective actions are taken.

- Maintain documents (evidence) in support of our continual compliance with standards, working with Legal, Quality, and Regulatory teams on the documentation requirements.

- In the event of an internal or external audit, you will be responsible for presenting the documentation as proof of compliance.

- Work with peer stakeholders in our Engineering, Legal, Privacy, Commercial, Marketing, Sales, Quality Compliance, and Regulatory Affairs groups.

- Partner with the team's subject matter experts to ensure risk mitigation activities are well documented.

What makes you successful :

- Excellent communication skills and a strong collaborator.

- Extensive experience and knowledge of various external standards and regulations, including FedRAMP, NIST 800-53, NIST CSF, ISO 27001, SOC2, GDPR, or other relevant standards.

- Sharp problem-solving aptitude and attitude.

- Extensive technical knowledge associated with cybersecurity and privacy standards within the Medical Device field or other regulated industries.

- Experience on end-to-end audit and compliance evaluation to third parties, vendors and partners.

- Experience in highly regulated industries such as healthcare, banking and finance companies are preferred.

- Limited to candidates who can start within 30 days of notice period.

- Onsite Work - 4x week as prescribed in local India office.

What you'll get :

- A front row seat to life changing CGM technology.

- A full and comprehensive benefits program.

- Growth opportunities on a global scale.

- Access to career development through in-house learning programs and/or qualified tuition reimbursement.

Experience and Education Requirements :

- Typically requires a Bachelor's degree and a minimum of 8 - 12 years of related experience.