R

Resmed

Cloud-connected medical devices and software platforms

Information Security Specialist

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeHalifax Regional Municipality, NS, CanadaNo salary listedIn-person

About the Job

Requirements

  • Proven ability to independently lead security risk assessments across a variety of technologies and environments.
  • Experience with third-party security risk management processes and platforms.
  • Strong understanding of authentication and authorization.
  • Strong understanding of encryption.
  • Strong understanding of application and network security.
  • Strong understanding of Data Loss Prevention (DLP).
  • Strong understanding of endpoint protection.
  • Strong understanding of Cloud Security Posture Management (CSPM).
  • Strong understanding of Cloud Access Security Broker (CASB).
  • Strong understanding of Privileged Access Management (PAM).
  • Strong understanding of Zero Trust Network Access (ZTNA).
  • Strong understanding of logging and monitoring.
  • Strong understanding of vulnerability management.
  • Strong understanding of incident response.

Responsibilities

  • Lead security engagement across global projects, aligning security practices with business and technical objectives.
  • Conduct end-to-end security risk assessments for cloud-native and hybrid environments, including architecture and control reviews.
  • Evaluate third-party products and services during onboarding and integration to ensure security and compliance requirements are met.
  • Lead security reviews of AI/ML-enabled products, focusing on secure design, guardrails, and risk mitigation.
  • Partner with project managers, product owners, architects, and developers to integrate security throughout the software development lifecycle.
  • Communicate security risks, recommendations, and mitigation plans in a clear, business-relevant manner.
  • Produce and maintain risk assessments, security summaries, remediation recommendations, and related documentation.
  • Track risks and controls using GRC tools to ensure accountability and traceability.
  • Stay current on emerging technologies, security threats, and industry best practices.
  • Contribute to the continuous improvement of security frameworks, processes, and standards across the organization.

Desired Qualifications

  • Bachelor’s degree.
  • Five or more years of related information security experience.
  • Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
  • Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
  • Knowledge of AWS cloud security controls.
  • Experience within healthcare or manufacturing environments.

About the Company

Resmed

Cloud-connected medical devices and software platforms

ResMed creates cloud-connected medical devices and software platforms to treat and manage sleep apnea, COPD, and other chronic diseases. Its devices (like sleep therapy gear) collect patient data and deliver therapy, while connected software platforms enable remote monitoring, coaching, and caregiver support. The company sells medical devices and offers software subscriptions, generating revenue from product sales and ongoing service fees. Unlike some competitors, ResMed combines hardware with cloud-based analytics and a broad ecosystem that supports patients, healthcare professionals, and caregivers across more than 120 countries. Its goal is to improve patient care and quality of life while reducing hospital visits and overall healthcare costs.

Company size
5,001-10,000
Company stage
IPO
Headquarters
San Diego, CA
Founded
1989

Recently Posted Jobs

Explore more opportunities at Resmed

See more jobs