Digital Security and Data Privacy Operations
September 17
Description
• Lead customer engagements and ensure product security and privacy requirements are addressed in collaboration with cross-functional teams. • Coordinate responses to customer inquiries/questionnaires regarding the security, privacy and technical controls embedded in Alcon products, including post-market activities. • Support product security incident and vulnerability response in collaboration with the Product Security function. • Design processes that both leverage existing tools, and new ones to support our customers. • Create KPIs and tools to measure customer support efforts. • Proactively identify and facilitate internal resolution of customers’ concerns about the controls and processes engineered into our products. • Identify documentation gaps, develop and/or partner, and maintain documentation, tools and methodologies to support customers. • Identify opportunities and take proactive actions in line with the continuous improvement disposition of the function. • Serve as liaison to customers during threat disclosure, breach notifications, etc. According to Alcon’s policies, procedures, and guidance of R&D Product Security, Enterprise Cybersecurity, Legal and the Global Data Privacy functions. • Serve as a customer advocate resource for control enhancements across Alcon’s portfolio of Digital Health products and services. • Stay current with latest and emerging digital security and privacy technologies and solutions. • Conduct regional/global leadership meetings, customer visits, attend conferences, etc.
Requirements
• Bachelor’s degree in computer science, or Information Security/Privacy or related field. • Master’s or advanced degree in a related field would be an advantage. • Fluency in English, Spanish (verbal and written) and/or additional languages. • Have or willing to pursue any of the following or other industry certifications: Certified Information Privacy Professional (CIPP), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Controls (CRISC), Certified Information Privacy Manager (CIPM), Certified Information Security Manager (CISM). • Experience in leading customer engagements related to medical devices/solutions deployments. • Knowledge and strong understanding of relevant legal and regulatory requirements, such as Japanese national regulations on information security and data privacy, ISO security (ISO 27001) and privacy (ISO 27701) standards. • Knowledge and experience in information security, privacy and risk management frameworks, policy and procedure development, information security and privacy assessments and audits. • Knowledge of risk analysis methodologies, IT compliance and control frameworks. • Excellent communication skills – written, oral and public speaking. • Japanese and English language proficiency. • High `Customer´ focus (both internal and external). • Ability to build strong relationships.
Benefits
• Competitive salary • Comprehensive benefits package • Training and continuous professional development • International exposure • Open, friendly and collaborative culture
Apply Now