{"id":3083001,"url":"https://alion.io/job/corin-product-security-compliance-lead","title":"Product Security & Compliance Lead","company":{"id":3008439,"name":"Corin","domain":"coringroup.com","url":"https://alion.io/company/coringroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Raynham, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-22T12:53:21Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-31T03:20:47Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Product Security & Compliance Lead\nLocation: Raynham, MA\n\nAbout the Role\nWe are seeking an experienced Product Security & Compliance Lead to play a critical role in protecting the security of our products, infrastructure, and customer environments while ensuring compliance with healthcare cybersecurity standards and regulatory requirements.\nThis is a highly collaborative and customer-facing position, requiring regular engagement with hospital IT and security teams, internal technology teams, and external partners. The successful candidate will be equally comfortable discussing technical cybersecurity controls with engineers as they are presenting security assurance information to non-technical stakeholders.\nThe role combines product and infrastructure security, customer and vendor security assurance, cybersecurity compliance, and reporting activities, helping to maintain trust across all technology touchpoints throughout the product lifecycle.\n\nKey Responsibilities\nProduct & Infrastructure Security\nImplement and maintain security controls across connected medical devices, software applications, and Azure cloud environments.\nConduct vulnerability assessments, threat modelling exercises, and risk analyses for new product releases and major software updates.\nPartner with Software Engineering, R&D, and IT teams to remediate vulnerabilities and security findings.\nManage endpoint protection, identity and access management (IAM), and security monitoring solutions within product and development environments.\nLead vulnerability management activities, including Software Bill of Materials (SBOM) reviews, third-party component risk assessments, coordinated vulnerability disclosure, and remediation planning.\nEnsure cybersecurity activities are embedded and maintained throughout the Total Product Lifecycle, including design, development, verification, release, post-market surveillance, vulnerability management, and retirement.\nHospital & Vendor Security Assurance\nAct as a key point of contact for hospital IT and Security teams, responding to vendor risk assessments and customer security questionnaires.\nCoordinate evidence gathering, control validation, and documentation required for customer security reviews.\nMaintain and manage a library of security assurance materials, including SOC 2 reports, ISO certifications, architecture diagrams, and penetration testing summaries.\nSupport incident response activities and coordinate communications with customers and healthcare organisations when required.\nCompliance & Reporting\nEnsure compliance with cybersecurity and regulatory frameworks including IEC 81001-5-1, ISO 27001, NIST Cybersecurity Framework (CSF), HIPAA, and FDA cybersecurity guidance.\nParticipate in internal audits, external audits, penetration testing activities, and regulatory assessments.\nPromote Privacy-by-Design principles and support data protection impact assessments, consent management processes, and privacy control implementation.\nTrack, monitor, and report security metrics, vulnerabilities, risks, and remediation activities to leadership teams.\nMaintain security policies, standards, procedures, and supporting documentation to ensure ongoing regulatory alignment.\n\nAbout You\nTo be successful in this role, you will bring:\n5+ years' experience in cybersecurity, ideally within healthcare, medical device, MedTech, or other highly regulated industries.\nProven experience managing hospital security reviews, vendor risk assessments, and customer security questionnaires.\nStrong knowledge of cybersecurity and compliance frameworks, including ISO 27001, IEC 81001-5-1, NIST CSF, HIPAA, and FDA cybersecurity requirements.\nHands-on experience with cloud and infrastructure security, preferably within Azure environments.\nA solid understanding of vulnerability management, secure software development lifecycle (Secure SDLC), and cybersecurity risk management.\nExcellent written and verbal communication skills with the ability to influence and build relationships across technical and non-technical audiences.\nStrong organisational skills and the ability to manage competing priorities in a fast-paced environment.\nProfessional cybersecurity certifications such as CISSP, CISM, HCISPP, or equivalent are highly desirable.\n\nWhy Join Us?\nThis is an exciting opportunity to shape and mature product cybersecurity within a growing healthcare technology environment. You'll have the chance to work at the intersection of healthcare, innovation, compliance, and security, helping deliver solutions that make a meaningful difference to patients and healthcare providers worldwide.\nOpportunity to work in a highly regulated and quality driven environment.\nBe part of a collaborative team committed to continuous improvement.\nContribute directly to the quality and safety of products that make a difference.\nProfessional development and career growth opportunities.\nThe base pay range for this position is $120,000 - $140,000. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.\nEmployee referral program where you can earn incentives for each successful hire you recommend\nIf you are passionate about cybersecurity, compliance, and building trust in connected healthcare technologies, we'd love to hear from you.","description_format":"text","description_chars":5336,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":2,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Surgical Instruments & Devices","Medical & Healthcare Robotics","Information Security","Orthopedic & Spine Implants"],"lifecycle":[{"event":"open","at":"2026-10-22T12:53:21Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":53,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/corin-product-security-compliance-lead","json_url":"https://alion.io/job/corin-product-security-compliance-lead.json","meta":{"generated_at":"2026-10-31T05:32:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7989,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3008439},"rest":"https://alion.io/mcp/rest/get_company?id=3008439"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcorin-product-security-compliance-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcorin-product-security-compliance-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcorin-product-security-compliance-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/corin-product-security-compliance-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcorin-product-security-compliance-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3083001}},{"tool":"search_jobs","arguments":{"company":"coringroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3083001},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}