Product Security Analyst

**Start a new adventure in the medical device industry today and make a difference in someone’s life.**

Our **Product Security Analyst** will work closely with global cross-functional teams to protect the confidentiality, integrity, and availability of Natus products and services from information security threats and vulnerabilities. You can expect to support customer product security and privacy inquiries, security and privacy product assessments, and the Natus secure development lifecycle, including new strategies, policies, procedures, and best practices. Can you see yourself working with our product portfolio that helps patients of all ages with nervous and sensory system disorders? Take the test below
- You are a proactive communicator involved in protecting the security and privacy of products throughout their entire product lifecycle.
- You are multi-tasking master who thrives on driving multiple projects across global time zones
- You are a continuous learner who stays up to date on technology trends and likes to help educate other parts of the business
- You enjoy partnership with a tight-knit team similarly motivated because at the end of the day, you know your efforts impact someone’s life through the powerful healthcare solutions created at Natus.

**Here’s what you can expect**:
**Canadian Benefits**
- Competitive salaries
- Comprehensive benefit package that starts your first day of employment
- Paid Holidays
- Paid time off plan (3 weeks, 7 sick days)
- Tuition reimbursement up to $5,000 annually, Udemy Online Learning
- **Location**:This position is available to be based out of a Natus Site or 100% Remote in North America

**In this job, you will**:

- Serve as the Subject Matter Expert (SME) on industry threat intelligence and best practices. This will require conducting research and staying up-to-date on emerging security trends, threats, and technologies while working closely with cross-functional teams to identify and deploy solutions within Natus products.
- Conduct Product Security Risk Assessments working with cross-functional teams as needed to identify threat sources and determine the likelihood and impact of successful exploitation of vulnerabilities on product assets and functions.
- Work with cross-functional teams to create Product Security Requirements based on risk assessment results, industry best practices and guidelines, customer feedback, emerging trends, threats intelligence, and emerging technologies.
- Work with Engineering teams to assess the cyber security posture products supporting security testing activities (e.g. SAST, SCA, Vulnerabilities Analysis, Pen Testing, etc.).
- Work with Marketing, Sales, and Service to respond to customer inquiries, questionnaires, and risk assessments
- **Travel**: up to 15%. Occasional domestic or international travel to customer sites to investigate complex

**Qualifications**:

- Bachelor's degree (B.A.) from a four-year college or university; or three to five years related experience and/or training; or an equivalent combination of education and experience
- At least 3 years’ related experience developing Security/Risk Management policies and procedures
- Experience with secure architecture development and best practices
- Knowledge of Information security risk assessment methodologies and standards
- Ability to communicate with and influence technical and non-technical customers, colleagues, and vendors
- Ability to organize, prioritize, and coordinate multiple work activities and meet target deadlines in a fast paced environment
- Strength in statistical analysis, identification of trends, matching information to issues and relevant reporting
- _Natus Medical Incorporated is committed to protecting our employees, customers and communities against COVID-19 and requires all employees to follow our vaccination policy, which currently require a COVID-19 vaccination for employment._

**Desirable Qualifications (Not Required)**:

- A security professional designation is an asset (e.g. CISA, CISSP, etc.)
- Experience with Software or Hardware development is an asset
- Experience with System Testing or Quality Assurance is an asset
- Knowledge of the FDA Guidance of Post-market Management of Cybersecurity in Medical Devices is an asset
- Knowledge of the FDA Content of Pre-market Submissions for Management of Cybersecurity in Medical Devices; UL 2900 is an asset

INDNATUS

**Want more info? You got it**

Natus Medical Incorporated: We’re the leading manufacturer of medical devices and software for a range of specialties, including Newborn Care, Neurology, Sleep, Hearing and Balance markets. Our mission is to improve patient outcomes in target markets through innovative screening, diagnostic and treatment solutions. Our products help improve the lives of people from birth to 100+.

**EEO Statement**

Natus Medical is an equal opportunity employer. All qualified applicants will receive consideration for employment without rega