Security and Privacy Compliance Analyst - Cybersecurity

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team:

The R&D Cybersecurity team is a high-growth, fast-paced environment where you work with leading-edge, software teams in to ensure the security of modern diabetes medical device systems. You will work alongside highly skilled and passionate innovators who know how to deliver exceptional results.

As a member of the R&D Cybersecurity team, you will be responsible for learning and reviewing our products end to end, identifying potential risks, gaps, as well as seeing them through completion.

Where you come in:

• You will collaborate with cross-functional teams to ensure the interests of cybersecurity and privacy compliance is represented in the team’s processes.

• You will facilitate the completion of security compliance questionnaires for vendors and partners.

• You ensure compliance with cybersecurity and privacy standards like FedRAMP, NIST, SOC2, ISO 27001, ENS, and EU MDR throughout the product development lifecycle.

• You continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps. You then collaborate with program managers and product owners to ensure corrective actions are taken.

• You maintain documents (evidence) in support of our continual compliance with standards, working with Legal, Quality, and Regulatory teams on the documentation requirements. In the event of an internal or external audit, you will be responsible for presenting the documentation as proof of compliance.

• You work with peer stakeholders in our Engineering, Legal, Privacy, Commercial, Marketing, Sales, Quality Compliance, and Regulatory Affairs groups to ensure the interests of legal, compliance, enterprise risk management, and others are represented in the team’s processes.

• You partner with the team’s subject matter experts to ensure risk mitigation activities are well documented.

What makes you successful:

• You possess excellent communication skills and are a strong collaborator.

• You have extensive experience and knowledge of various external standards and regulations, including FedRAMP, NIST 800-53, NIST CSF, ISO 27001, SOC2, GDPR, or other relevant standards.

• You possess a sharp problem-solving aptitude and attitude.

• The ideal candidate will have extensive technical knowledge associated with cybersecurity and privacy standards within the Medical Device field or other regulated industries

What you’ll get:

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community.

• A full and comprehensive benefits program.

• Growth opportunities on a global scale.

• Access to career development through in-house learning programs and/or qualified tuition reimbursement.

• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve.

Travel Required:

• 0-5%

Experience and Education Requirements:

• Typically requires a Bachelor’s degree and a minimum of 5 – 8 years of related experience

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications.