Principal Product Security Engineer

$99,000 - $170,200/Yr

Johnson & Johnson - Columbus, OH

Full-time - Senior

Remote - Columbus, OH

Chemical Manufacturing

About the position

The Principal Product Security Engineer at Johnson & Johnson will play a crucial role in ensuring that security is integrated into the product development lifecycle for medical devices. This position involves collaborating with engineering teams to adhere to product security policies, creating and improving security processes, and managing compliance with industry standards. The role is pivotal in shaping future product development and industry standards, directly impacting patient lives through effective security measures.

Responsibilities

• Partner with engineering teams to ensure adherence to product security policies and processes.
• Create, update, and improve product security processes.
• Act as a Subject Matter Expert (SME) on cybersecurity matters and provide guidance to development teams.
• Advocate for the inclusion of cybersecurity input into all phases of the product lifecycle.
• Deliver documentation for pre-market product development activities, including security plans and risk management documentation.
• Drive and monitor post-market vulnerability management activities.
• Support compliance certification activities such as SOC2 and ISO 27001.
• Identify and integrate new compliance requirements and best practices into product security programs.
• Maintain relationships with Information Sharing and Analysis Organizations.
• Guide teams to balance business needs with medical device security objectives.

Requirements

• Bachelor's degree in a relevant field.
• 5+ years of industry experience in Information Security.
• Working knowledge of regulatory standards and compliance frameworks (e.g., NIST Cybersecurity Framework, ISO27001, SOC2, HIPAA, GDPR).
• Experience with security risk management techniques.
• Demonstrated organizational skills and attention to detail.
• Strong communication and interpersonal skills.

Nice-to-haves

• Experience working in a regulated environment, particularly FDA-regulated.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Life insurance
• Short- and long-term disability insurance
• Business accident insurance
• Group legal insurance
• 401(k) retirement plan
• Vacation time (up to 120 hours per year)
• Sick time (up to 40 hours per year)
• Holiday pay (up to 13 days per year)
• Floating holidays
• Work, Personal and Family Time (up to 40 hours per year)