Description

Overview:

The Cyber Security team enable the local market access and protect the enterprise, drives cyber compliance activities. We engage with portfolio, manufacture facilities and functions on all aspect of cybersecurity in the region. We are responsible for the local implementation of Cybersecurity Management System and the under lying regional directives, procedures, guidelines & standards. Within our organization, you will have the opportunity to be working in a cutting edge technology in a diverse environment across functions, business lines. You will join a community of cybersecurity experts who are all passionate about it!

Position Summary:

As Cybersecurity Expert you are primarily overseeing cybersecurity activities in product development lifecycle across the region, coach the cybersecurity expert in the respective product team cybersecurity requirements implementation planning, threat & risk identification and security testing, ensure releasing the product with minimum cybersecurity risk. Working closely with the product R&D, 3rd-party vendor, and support in cybersecurity certification and NMPA cybersecurity related activities.

Furthermore, in this role you will be assisting Siemens Healthineers’ portfolios in providing expert advice, guidance and support towards the necessary standards and controls. You will be closely aligning with respective governance owners to ensure that cyber related regulatory requirements are analyzed. You will be leading the local cybersecurity expert community across legal entities to grow cybersecurity knowledge and maturity.

Duties and Responsibilities:

• Based on the product and solution security internal regulation Siemens Healthineers steer a process implementation in the respective QMS (e.g. integrate threat & risk analysis, security requirements engineering, secure architecture and design, hardening, secure coding, security testing into PLM, SCM)

• Implement and manage incident & vulnerability handling activities and process. Drive classification of vulnerabilities & incidents and perform final alignment with Cybersecurity Officer of Region China.

• Ensure that relevant stakeholders have sufficient awareness for product and solution security.

• Ensure that stakeholders own required know-how about product and solution security