Product Security & Compliance Lead

Product Security & Compliance Lead

Location: Raynham, MA

About the Role

We are seeking an experienced Product Security & Compliance Lead to play a critical role in protecting the security of our products, infrastructure, and customer environments while ensuring compliance with healthcare cybersecurity standards and regulatory requirements.

This is a highly collaborative and customer-facing position, requiring regular engagement with hospital IT and security teams, internal technology teams, and external partners. The successful candidate will be equally comfortable discussing technical cybersecurity controls with engineers as they are presenting security assurance information to non-technical stakeholders.

The role combines product and infrastructure security, customer and vendor security assurance, cybersecurity compliance, and reporting activities, helping to maintain trust across all technology touchpoints throughout the product lifecycle.

Key Responsibilities

Product & Infrastructure Security

Implement and maintain security controls across connected medical devices, software applications, and Azure cloud environments.

Conduct vulnerability assessments, threat modelling exercises, and risk analyses for new product releases and major software updates.

Partner with Software Engineering, R&D, and IT teams to remediate vulnerabilities and security findings.

Manage endpoint protection, identity and access management (IAM), and security monitoring solutions within product and development environments.

Lead vulnerability management activities, including Software Bill of Materials (SBOM) reviews, third-party component risk assessments, coordinated vulnerability disclosure, and remediation planning.

Ensure cybersecurity activities are embedded and maintained throughout the Total Product Lifecycle, including design, development, verification, release, post-market surveillance, vulnerability management, and retirement.

Hospital & Vendor Security Assurance

Act as a key point of contact for hospital IT and Security teams, responding to vendor risk assessments and customer security questionnaires.

Coordinate evidence gathering, control validation, and documentation required for customer security reviews.

Maintain and manage a library of security assurance materials, including SOC 2 reports, ISO certifications, architecture diagrams, and penetration testing summaries.

Support incident response activities and coordinate communications with customers and healthcare organisations when required.

Compliance & Reporting

Ensure compliance with cybersecurity and regulatory frameworks including IEC 81001-5-1, ISO 27001, NIST Cybersecurity Framework (CSF), HIPAA, and FDA cybersecurity guidance.

Participate in internal audits, external audits, penetration testing activities, and regulatory assessments.

Promote Privacy-by-Design principles and support data protection impact assessments, consent management processes, and privacy control implementation.

Track, monitor, and report security metrics, vulnerabilities, risks, and remediation activities to leadership teams.

Maintain security policies, standards, procedures, and supporting documentation to ensure ongoing regulatory alignment.

About You

To be successful in this role, you will bring:

5+ years' experience in cybersecurity, ideally within healthcare, medical device, MedTech, or other highly regulated industries.

Proven experience managing hospital security reviews, vendor risk assessments, and customer security questionnaires.

Strong knowledge of cybersecurity and compliance frameworks, including ISO 27001, IEC 81001-5-1, NIST CSF, HIPAA, and FDA cybersecurity requirements.

Hands-on experience with cloud and infrastructure security, preferably within Azure environments.

A solid understanding of vulnerability management, secure software development lifecycle (Secure SDLC), and cybersecurity risk management.

Excellent written and verbal communication skills with the ability to influence and build relationships across technical and non-technical audiences.

Strong organisational skills and the ability to manage competing priorities in a fast-paced environment.

Professional cybersecurity certifications such as CISSP, CISM, HCISPP, or equivalent are highly desirable.

Why Join Us?

This is an exciting opportunity to shape and mature product cybersecurity within a growing healthcare technology environment. You'll have the chance to work at the intersection of healthcare, innovation, compliance, and security, helping deliver solutions that make a meaningful difference to patients and healthcare providers worldwide.

Opportunity to work in a highly regulated and quality driven environment.

Be part of a collaborative team committed to continuous improvement.

Contribute directly to the quality and safety of products that make a difference.

Professional development and career growth opportunities.

The base pay range for this position is $120,000 - $140,000. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.

Employee referral program where you can earn incentives for each successful hire you recommend

If you are passionate about cybersecurity, compliance, and building trust in connected healthcare technologies, we'd love to hear from you.