- Location
- Bengaluru, KA,IN, IN
- Type
- Full-time
- Department
- IT
- Seniority
- Mid
- Source
- Eightfold
Description
Meet the team:
The R&D Cybersecurity team is a high-growth, fast-paced environment where you work with leading-edge, software teams in to ensure the security of modern diabetes medical device systems. You will work alongside highly skilled and passionate innovators who know how to deliver exceptional results.
As a GRC Analyst within R&D Cybersecurity, you will assess cybersecurity and privacy compliance across products and supporting processes, translate regulatory requirements into actionable controls, maintain audit-ready evidence, and drive identified gaps through remediation and validated closure. You will partner with Engineering, Legal, Privacy, Quality, Regulatory Affairs, and business stakeholders to strengthen risk management and maintain compliance throughout the product lifecycle.
Where you come in:
- You will collaborate with cross-functional teams to ensure the interests of cybersecurity and privacy compliance are represented in the team’s processes.
- You will facilitate the completion of security compliance questionnaires for vendors, partners, and regulators.
- Own end-to-end cybersecurity and privacy compliance assessments across the product development lifecycle, ensuring alignment with standards and regulations such as NIST CSF, NIST 800-53, SOC 2, ISO 27001, ENS, DPDP, GDPR, and EU MDR.
- You continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps. You then collaborate with program managers and product owners to ensure corrective actions are taken.
- You maintain audit-ready compliance evidence in the designated GRC platform, collaborating with Legal, Quality, and Regulatory teams to support ongoing compliance with applicable standards and requirements.
- In the event of an internal or external audit, you will be responsible for facilitating the documentation as proof of compliance.
- Conduct cybersecurity and privacy due diligence for vendors, products, and technology partners.
- Map regulatory and contractual requirements to internal policies, procedures, and technical controls.
- Support the creation, review, and periodic update of cybersecurity policies, standards, procedures, and control documentation.
- You partner with the team’s subject matter experts to ensure risk mitigation activities are well documented.
What makes you successful:
- You possess excellent communication and collaboration skills, along with a sharp problem-solving aptitude and a proactive attitude.
- The ideal candidate will have extensive technical knowledge associated with cybersecurity and privacy standards within the Medical Device field or other regulated industries
- Experience performing cybersecurity compliance or control assessments in medical devices, healthcare, pharmaceuticals, financial services, or another regulated industry.
- Preferred certifications: CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent.
What you’ll get:
- A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.
- A full and comprehensive benefits program.
- Growth opportunities on a global scale.
- Access to career development through in-house learning programs and/or qualified tuition reimbursement.
- An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.
Travel Required:
- 0-5%
Experience and Education Requirements:
- Typically requires a Bachelor’s degree and a minimum of 5 – 8 years of related experience
AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people.