Cyber Security Manager

Are you interested in working for a company that is passionate about its customers? That lives its values and nurtures its employees? Then Medela is the company for you.

We are seeking a Cyber Security Manager to join our R&D team.

• Lead product cybersecurity across connected medical devices, embedded software, mobile apps, cloud services, backend platforms, APIs, and connected data flows.
• Define and maintain the cybersecurity strategy, governance framework, roadmap, priorities, and ways of working. Conduct threat modelling, cybersecurity risk assessments, control definition, and residual risk evaluations.
• Represent cybersecurity in architecture reviews, design reviews, supplier discussions, and lifecycle activities.
• Coordinate vulnerability management, penetration testing, security verification, and remediation activities.
• Own and maintain cybersecurity documentation, regulatory evidence, SBOMs, and technical file contributions.
• Drive postmarket cybersecurity monitoring, incident response coordination, and continuous process improvement.
• Own the cybersecurity architecture and design decisions.
• Define the cybersecurity requirements for suppliers and reviewing supplier cyber security evidence and documentation

Location

This is a Baar-based hybrid role, with three in-office days each week to enable rapid collaboration.

• Degree in Computer Science, Software Engineering, Electrical Engineering, Biomedical Engineering, Cybersecurity, or a related field.
• Demonstrated product cybersecurity experience, preferably in medical devices, connected products, embedded systems, mobile apps, cloud services, IoT, or another regulated environment. Good understanding of product cybersecurity across firmware, apps, cloud and backend services, APIs, connected ecosystems, and data flows.
• Hands-on experience with cybersecurity risk management, threat modelling, vulnerability assessments, SBOMs, secure development lifecycle, security testing, and post market monitoring.
• Knowledge of standards and regulations such as IEC 81001-5-1, IEC 62304, ISO 14971, ISO 13485, FDA cybersecurity guidance, EU MDR, IEC 62443, ISO 27001, and GDPR.
• Ability to translate cybersecurity risks into practical engineering requirements, documentation, supplier evidence, and risk-based decisions.
• Pragmatic, can-do professional with strong communication skills and the ability to influence stakeholders without direct authority.
• Candidates with background in embedded software, software architecture, IoT, connected products, mobile applications, or cloud platforms are welcome to apply

At Medela, you will be joining a global community of colleagues, united by the purpose that drives our business: helping people. Medela exists to advance human health and wellbeing through knowledge-based and innovative human milk and medical vacuum solutions.

Our employees are empowered to serve this purpose in a family-owned company that is growing rapidly around the world. We value intensive exchanges, diverse perspectives, and unbureaucratic decisions. You will have the opportunity to develop at an international level, and witness the direct impact your work has on our company’s success.

If you are interested in this opportunity, we are looking forward to receiving your application.

Due to work permit restrictions, we can only consider applications from Swiss Nationals, UK, EU citizens as well as relevant work-permit holders for Switzerland.

For this recruitment we will not consider any applications sent through by agencies.