Cybersecurity&risk Manager-medtech Emea

**"Caring for the worldone person at a time”**inspires and unites the people of Johnson & Johnson. We embrace research and science - bringing innovative ideas, products and services to advance the health and well-being of people. Employees of the Johnson & Johnson Family of Companies work with partners in health care to touch the lives of over a billion people every day, throughout the world. This culture of caring is the focus of our corporate philosophy, that are anchored in the internationally applicable **Credo** **Cybersecurity & Risk Manager - Johnson & Johnson MedTech EMEA**: **Position overview** The Cybersecurity Manager will be responsible for supporting the EMEA MedTech with Information Security responsibilities across the Ethicon franchise primarily, but also the other MedTech Companies of Johnson and Johnson, according to the needs and priorities agreed with the business functions and the Global Information Security Team. As a Cybersecurity SME in the region for Ethicon, the Cybersecurity Manager will act as a sales enabler by providing knowledge and expertise in order to roll out of Ethicon R&D solutions. This role will be located in Switzerland (Zug), Germany (Norderstedt), UK (Berkshire) or other major J&J EU locations. **Tasks & Responsibilities**: - Be a trusted security advisor in MedTech. Seeking secure solutions that enable MedTech business to grow, be innovative and enabled to realize the new breakthrough - Understand and promote security in technical areas keeping an eye on activities associated with external regulations and internal Johnson & Johnson policies such as, but not limited to Information Asset Protection Policies (IAPP), GxP and GDPR - Identifies Cybersecurity risks and issues. Advises all staff where their activities put the company at risk and provides actionable solutions to remediate risks and issues. - Enables the sales process by giving Cybersecurity expert advice and providing training and documentation materials. - Keep up to date on regional regulations and translate into requirements. - Liaises with business process and technology owners, to build understanding of Cybersecurity risks and provides advice on how to mitigate these risks, through security assessments & embedding IT Security into the design of business products, digital healthcare solutions and processes. - Collaborates with J&J Technology (JJT) on compliance assessments and strives to shape the administrative controls as efficient as possible, providing the ability to focus on the advisory for cybersecurity which provides the innovative edge required for the business. - Monitor Ethicon & MedTech sector compliance with J&J’s Global Information Security Framework and the applicable security laws and regulations. - May serve as first point of contact for internal and external audits and inspections. - Actively engages with the ISRM Global MedTech team & EMEA ISRM Team to present the Security program for Ethicon & MedTech to this community in order to ensure maximal alignment across the region. - Actively engages with the Global ISRM Team and participates to its information sessions, to ensure maximal alignment with global standards and practices. - Other duties may be assigned. **Qualifications** - A Bachelor's degree is required. A major in Cybersecurity or Computer Science is highly preferred. - A minimum of 8 years of progressive experience in Information Security & Risk Management and/or IT. - Previous experience developing effective and strong partnerships along with relationship building skills with business leaders and partners. - Solid understanding of current security threats, mitigation measures and security vendors/technologies. - Experience working in complex, fast-paced environments. - Experience supporting, leading and influencing security assessments (e.g. SOC Type 2 reporting, PCI, ISO 27001). - Big Picture Thinking / Attention to Detail - align strategic and tactical - Results Orientation and ability to drive to short timelines. - Creative problem-solving skills. - Customer focus (internal & external). - Superb communication, social and collaboration skills, able to network and influence various levels of the organization, cross sector, cross-functionally and globally. - Proven ability to influence/collaborate to get to desired result. - Fluency in English, other languages are a plus **Preferred**: - Experience within health care industry and its businesses, preferably implementation of solutions in a hospital environment with end2end support - Experience in Digital Surgery with Medical Device Software knowledge - Experience with implementation or review of compliance with international security standards or regulations. - Experience in People Management. - Security certifications such as CISSP, CCSP, ISSAP, CISM, etc. **Our offer**: - An exciting position in an international and dynamic environment with continuous learning and growth opportunities - A competitive salary,