Senior Advisor - Medical

The healthcare ecosystem includes a broad base of technologies. The Senior Cybersecurity Advisor will have the opportunity to gain experience with many of these cross-functional technologies including Industrial OT/IIoT in areas like hospital building management systems, IoT used in such applications as data acquisition for drug discovery, testing and certification per industry standards, and cutting across a variety of ecosystems including Smart Homes for telehealth, Smart Buildings, Smart Healthcare, Smart Mobility/ Automotive for patient transport systems, Smart Cities, Smart Manufacturing -Industry4.0, Factory Automation, and Autonomous Systems that can enhance the practice of medicine.

• Possess an understanding of the regulated medical device ecosystem, regulatory guidance documents and industry best practices for cybersecurity, including tailoring of quality management systems, risk management processes, and software development lifecycle processes to traceably demonstrate that medical devices and other healthcare technologies are cybersecure.

• Be able to provide personalized guidance and support to customers, considering project planning, training, assessment, documentation, and implementation.

• Support the Project Management team on evaluation scoping, resource requirements, certification body and customer expectations, delivering projects within the expected time.

• Pro-actively identify relevant industry trends to maintain and grow expertise in this domain, while also mentoring and coaching colleagues and taking ownership of activities to increase customer awareness of UL (including papers, articles, conference attendance, participation in industry associations, technical working groups, etc).

• Travel as required in order provide the best service to customers

• Support UL's laboratory teams during penetration testing for evaluation with regard to reverse engineering, static and dynamic analysis, protocol attacks and the exploitation of various weaknesses and vulnerabilities that may exist in the product's attack surface.

• Have good writing skills and be able to generate formal reports in line with customer and certification scheme requirements.

• Contribute to internal work processes by improving tools to evaluate efficiency, report writing and technical training.

• Coming into this role with at least 3-5 years of relevant work experience, including work with industry standards, best practices, and security frameworks.

• Having proven experience in customer facing advisory services (project and delivery), expertise and in-depth knowledge of product testing and certification methodologies.

• Having experience and competency in medical device cybersecurity management domains (Quality Management, Risk Management, and Software Development Life Cycle Management) and having technical competencies in specifically relevant cybersecurity practice areas such as threat modeling and vulnerability management.

• Having strong communication skills and the ability to quickly adapt to various technical and organizational environments.

• Being resilient and collaborative, being able to coach other team members, sharing knowledge and working concurrently across diverse teams.

• Having a proven history of responsibility, accuracy, and attention to details.

• Fostering a deep understanding of and desire to address customer needs.

• Maintaining detailed knowledge of industry-wide issues, needs, and problems.

• Being able to travel internationally.

UL LLC has been and will continue to be an equal opportunity employer. To assure full implementation of this equal employment policy, we will take steps to assure that:

Persons are recruited, hired, assigned and promoted without regard to race, color, age, sex or gender, sexual orientation, gender identity, gender expression, transgender status, religion, creed, national origin, ethnicity, citizenship, ancestry, disability, genetic information, military or veteran status, pregnancy, marital or familial status, or any other protected category under applicable law.