Security and Privacy Compliance Analyst - Cybersecurity

Overview

A GRC Analyst role within R&D Cybersecurity, assessing cybersecurity and privacy compliance across Dexcom's diabetes medical device products and supporting processes.

What you'll do

• Collaborate with cross-functional teams to ensure cybersecurity and privacy compliance interests are represented in the team's processes.
• Facilitate the completion of security compliance questionnaires for vendors, partners, and regulators.
• Own end-to-end cybersecurity and privacy compliance assessments across the product development lifecycle, ensuring alignment with NIST CSF, NIST 800-53, SOC 2, ISO 27001, ENS, DPDP, GDPR, and EU MDR.
• Continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps.
• Collaborate with program managers and product owners to ensure corrective actions are taken.
• Maintain audit-ready compliance evidence in the designated GRC platform, collaborating with Legal, Quality, and Regulatory teams.
• Facilitate documentation as proof of compliance during internal or external audits.
• Conduct cybersecurity and privacy due diligence for vendors, products, and technology partners.
• Map regulatory and contractual requirements to internal policies, procedures, and technical controls.
• Support the creation, review, and periodic update of cybersecurity policies, standards, procedures, and control documentation.
• Partner with subject matter experts to ensure risk mitigation activities are well documented.

What you'll need

• Typically a Bachelor's degree and a minimum of 5-8 years of related experience.
• Extensive technical knowledge of cybersecurity and privacy standards within the Medical Device field or other regulated industries.
• Experience performing cybersecurity compliance or control assessments in medical devices, healthcare, pharmaceuticals, financial services, or another regulated industry.
• Excellent communication and collaboration skills.
• Sharp problem-solving aptitude and a proactive attitude.

Nice to have

• Preferred certifications: CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent.

Details

• Location: Bengaluru, India.
• Travel required: 0-5%.