Cybersecurity Risk Manager (f/m/d)

Join us in pioneering breakthroughs in healthcare. For everyone. Everywhere. Sustainably.

Our inspiring and caring environment forms a global community that celebrates diversity and individuality. We encourage you to step beyond your comfort zone, offering resources and flexibility to foster your professional and personal growth, all while valuing your unique contributions.

As part of Varian’s Cybersecurity organization, this role plays a key part in strengthening and advancing our Cybersecurity Management System (CYSMS) across the enterprise. You will contribute to ensuring regulatory compliance and supporting certification efforts by driving cybersecurity activities throughout the lifecycle – from design and implementation to operational excellence.

Working closely with cross-functional stakeholders, you will help identify, assess, and mitigate risks while continuously improving our cybersecurity posture and governance framework.

 Your tasks and responsibilities:

• You support the operation and continuous improvement of the Varian Cybersecurity Management System (CYSMS) and contribute to certification and regulatory compliance activities.
• You lead the development and execution of enterprise-wide cybersecurity risk assessments, including HIPAA risk assessments and related governance processes.
• You collaborate with Business Lines, Cybersecurity Officers, and business functions to identify, assess, and manage cybersecurity risks and compliance gaps.
• You coordinate remediation activities, corrective actions, audit findings, non-conformities, and continuous improvement initiatives across the organization.
• You support internal and external audits by preparing documentation, providing evidence, and driving follow-up actions.
• You monitor the effectiveness of cybersecurity controls and provide assurance activities to ensure compliance with applicable standards, certifications, and regulations.
• You prepare reports, risk summaries, and executive-level presentations to support cybersecurity decision-making and governance.

Your qualifications and experience:

• Bachelor’s or Master’s degree in Cybersecurity, Information Security, IT, or a related field
• Several years of experience in cybersecurity, risk management, or compliance within a complex, regulated environment
• Strong understanding of cybersecurity frameworks, certification environments, and regulatory requirements.
• Experience conducting risk assessments, managing remediation programs, and coordinating compliance activities across multiple stakeholders.
• Familiarity with healthcare regulations, including HIPAA, and cybersecurity requirements within regulated industries is an advantage.
• Strong analytical, organizational, and problem-solving skills with the ability to manage multiple priorities simultaneously.
• Excellent communication and stakeholder management skills, including the ability to present complex topics to leadership and executive audiences.
• Fluent English language skills; additional languages are beneficial.

#LI-OS1

#LI-Hybrid

Who we are: We are a team of more than 72,000 highly dedicated Healthineers in more than 70 countries. As a leader in medical technology, we constantly push the boundaries to create better outcomes and experiences for patients, no matter where they live or what health issues they are facing. Our portfolio is crucial for clinical decision-making and treatment pathways.

How we work: When you join Siemens Healthineers, you become one in a global team of scientists, clinicians, developers, researchers, professionals, and skilled specialists, who believe in each individual’s potential to contribute with diverse ideas. We are from different backgrounds, cultures, religions, political and/or sexual orientations, and work together, to fight the world’s most threatening diseases and enable access to care, united by one purpose: to pioneer breakthroughs in healthcare. For everyone. Everywhere. Sustainably.

To find out more about Healthineers’ specific businesses, please visit our company page here.

As an equal opportunity employer, we welcome applications from individuals with disabilities.

Data Privacy: We care about your data privacy and take compliance with GDPR as well as other data protection legislation seriously. For this reason, we ask you not to send us your CV or resume by email. We ask instead that you create a profile where you can upload your CV. Setting up a profile also lets us know you are interested in career opportunities with us and makes it easy for us to send you an alert when relevant positions become open. Register here to get started.

Beware of Job Scams: Please beware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as Siemens Healthineers recruiters/employees.  These scammers may attempt to collect your confidential personal or financial information.  If you are concerned that an offer of employment with Siemens Healthineers might be a scam or that the recruiter is not legitimate, please verify by searching for the posting on the Siemens Healthineers career site.

To all recruitment agencies: Siemens Healthineers does not accept agency resumes. Please do not forward resumes to our jobs alias, employees, or any other company location. Siemens Healthineers is not responsible for any fees related to unsolicited resumes. As an equal opportunity employer, we welcome applications from individuals with disabilities.