SalariesSign in
AboutPrivacyTerms
Cyber Risk and Compliance Specialist
LivaNova

Cyber Risk and Compliance Specialist

United StatesRemoteFull-time
Posted 12 days ago · Oct 6
Apply

Job Description

As a global medtech company, we are driven by our Vision of changing the trajectory of lives for a new day and our Mission to create ingenious solutions that ignite patient turnarounds. Our relentless commitment to patients and strong legacy of innovation in healthcare are the foundation of our future. If you're looking for a new chance, a new beginning, a new trajectory, LivaNova is where your talent can truly thrive. Join our talented team members worldwide to become a pioneer of tomorrow—because at LivaNova, we don’t just treat conditions — we aspire to alter the course of lives.

The Role

As our Cyber Risk and Compliance Specialist, you will occupy a critical role that is 50% technical auditor and 50% security advocate. You will ensure the integrity of our financial systems through IT SOX compliance while simultaneously maturing our global compliance posture (HIPAA/NIS2) and building a high-integrity security culture through a comprehensive Security Awareness program.


Focus A: IT SOX & Financial Integrity (60%)

  • Program Ownership: Lead the IT SOX program and design, implement, and test IT General Controls (ITGCs), IT Application controls (ITACs) and Key Reports (IPE) across our enterprise applications, databases, and infrastructure.

• Audit Management: Serve as the primary "translator" between technical teams and external auditors, ensuring evidence is accurate, timely, and defensible.

• Deficiency Management: Lead the root-cause analysis for any control failures and partner with stakeholders to build long-term, remediation plans.


Focus B: HIPAA, NIS2 & Risk Advisory (30%)

• Healthcare Compliance (HIPAA): Act as the technical SME for the HIPAA Security Rule, ensuring controls protect PHI, including controls monitoring and providing guidance to management for new systems.

• International Resilience (NIS2): Lead the alignment of our security posture with the NIS2 Directive, focusing on key areas in the directive for our European operations.

• Strategic Risk Assessments: Conduct deep-dive risk assessments for new technologies and vendors, ensuring compliance is baked in from the procurement stage.


Focus C: Security Awareness & Training (10%)

• Program Development: Manage the security awareness program that goes beyond "check-the-box" training. You will create engaging content for diverse audiences, from senior leadership to staff.

• Policy Promotion: Translate dense Information Security Policies into digestible, actionable "good practices" for IT administrators and data owners.

• Culture Building: Design targeted communication campaigns to increase internal reporting of security incidents and reinforce the importance of compliance.


Qualifications

• Experience: 5–7 years in IT Audit, IT Compliance, or Cyber Risk.

• Regulatory Knowledge: Expert-level understanding of SOX 404 (ITGCs) and a strong working knowledge of the HIPAA Security Rule and NIS2.

• Frameworks: Proficiency in applying NIST 800-53, ISO 27001, NIST CSF, or COBIT.

• Certifications: CISA is highly preferred; CISSP or CRISC is a major plus.

• Skills: The ability to explain to key stakeholders why a certain control is necessary without sounding like an auditor.

• Technology: Experience with ERP systems, such as SAP (ECC/S4 HANA) etc., cloud environments like Microsoft Azure, AWS etc., GRC systems such as Auditboard, Workiva or other.


Valuing different backgrounds:

LivaNova values equality and diversity. We are committed to ensuring that our recruitment process is fair, transparent and free from unlawful discrimination. Our selection process is driven by the key demands/requirements for the role rather than bias or discrimination on the basis of a candidate’s sex, gender identity, age, marital status, veteran status, non-job-related disability/handicap or medical condition, family status, sexual orientation, religion, color, ethnicity, race or any other legally protected classification.


Notice to third party agencies:

Please note that we do not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Services Agreement, we will not consider, or agree to, payment of any referral compensation or recruiter fee. In the event that a recruiter or agency submits a resume or candidate without a previously signed agreement, we explicitly reserve the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency.


Beware of Job Scams:

Please beware of potentially fraudulent job postings or suspicious recruiting activity by persons posing as LivaNova recruiters or employees. The scammers may attempt to solicit confidential, personal information, such as a social security number, or your financial information. LivaNova will never ask for fees prior/during/after the application process, nor will we ask for banking details or personal financial information in return for the assurance of employment. If you are concerned that an offer of employment might be a scam or that the recruiter is not legitimate, please verify by searching for “See Open Jobs” on , and check that all recruitment emails come from an @livanova.com email address.

Originally posted on Himalayas

View job

Senior Threat Intelligence Engineer

Coinbase

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Staff Software Engineer, Security Platform

Coinbase

  • India
  • Remote
  • Full-time
Apply
12 days ago
View job

GRC Platform Expert [Remote]

CyberArrow

  • Greece
  • Remote
  • Full-time
Apply
12 days ago
View job

Threat Intelligence Platform Engineer

Coinbase

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Assoc General Counsel - EU/Data Privacy - Clinical & Commercial

United-Biosource-Corporation

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Security Engineer I, Application Security

Trail of Bits

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job
E

Application Security Engineer

Enjoy Gaming LLC

  • Worldwide
  • Remote
  • Full-time
Apply
12 days ago
View job

GRC Security Expert

Leadtech

  • Spain
  • Remote
  • Full-time
Apply
12 days ago
View job

Principal Product Security Engineer

Tellent

  • Germany
  • Remote
  • Contract
Apply
12 days ago
View job

Cyber Risk and Compliance Specialist

LivaNova

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

VP Security Strategy – Cybersecurity Leadership

MastarRec

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job
S

Backend Engineer - Platform Security

Spotify

  • London
  • Remote / On-site
Apply
12 days ago
View job

SOC Security Analyst L3

BlueVoyant

  • Philippines
  • Remote
  • Full-time
Apply
12 days ago
View job

Head of Security Architecture

MastarRec

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job
Q

Cybersecurity Talent Pool | SOC, Cloud Security, GRC & Incident Response Profess

Quadro Consulting

  • Serbia
  • Remote
  • Contract
Apply
12 days ago
View job

Senior Manager, Privacy

Step Up For Students

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Manager II, Identity Access Management (PAM)

Navy Federal Credit Union

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Senior Security Engineer Cryptography

Trail of Bits

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Senior Product Cybersecurity Technical Program Manager

General Motors

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

IAM Engineer

Cashea

  • Argentina
  • Remote
  • Full-time
Apply
12 days ago
View job

IAM Engineer

Southern New Hampshire University

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Director, OT/IoT Security Services- Remote (Anywhere in the U.S.)

GuidePoint Security LLC

  • United States
  • Remote
  • Full-time
Apply
12 days ago
View job

Cybersecurity Assessor (State & Local Government)

AlphaHire

  • United States
  • Remote
  • Contract
Apply
12 days ago
View job

Senior AI Risk Analyst

Victaulic

  • United States
  • Remote
  • Full-time
Apply
13 days ago
View job
S

SAP Security & GRC Analyst

Sony Pictures Entertainment Inc.

  • India
  • Remote
  • Full-time
Apply
13 days ago
View job

Staff Cyber Security Engineer – AIDR/AISPM

Bread Financial

  • United States
  • Remote
  • Full-time
Apply
13 days ago
View job

Cloud Security Engineer

Recruitee

  • Worldwide
  • Remote
  • Full-time
Apply
13 days ago
View job

Senior Managing Consultant - Cybersecurity

Berkeley Research Group

  • United States
  • Remote
  • Full-time
Apply
13 days ago
View job

Engagement Lead, Incident Response Partner Services

Crowdstrike

  • United States
  • Remote
  • Full-time
Apply
13 days ago
View job

Databricks Platform and DevSecOps Engineer

OpenDataJobs

  • United States
  • Remote
  • Full-time
Apply
13 days ago
PreviousPage 60 of 126Next
LivaNova

Cyber Risk and Compliance Specialist

United StatesRemoteFull-time
Posted 12 days ago · Oct 6
Apply

Job Description

As a global medtech company, we are driven by our Vision of changing the trajectory of lives for a new day and our Mission to create ingenious solutions that ignite patient turnarounds. Our relentless commitment to patients and strong legacy of innovation in healthcare are the foundation of our future. If you're looking for a new chance, a new beginning, a new trajectory, LivaNova is where your talent can truly thrive. Join our talented team members worldwide to become a pioneer of tomorrow—because at LivaNova, we don’t just treat conditions — we aspire to alter the course of lives.

The Role

As our Cyber Risk and Compliance Specialist, you will occupy a critical role that is 50% technical auditor and 50% security advocate. You will ensure the integrity of our financial systems through IT SOX compliance while simultaneously maturing our global compliance posture (HIPAA/NIS2) and building a high-integrity security culture through a comprehensive Security Awareness program.


Focus A: IT SOX & Financial Integrity (60%)

  • Program Ownership: Lead the IT SOX program and design, implement, and test IT General Controls (ITGCs), IT Application controls (ITACs) and Key Reports (IPE) across our enterprise applications, databases, and infrastructure.

• Audit Management: Serve as the primary "translator" between technical teams and external auditors, ensuring evidence is accurate, timely, and defensible.

• Deficiency Management: Lead the root-cause analysis for any control failures and partner with stakeholders to build long-term, remediation plans.


Focus B: HIPAA, NIS2 & Risk Advisory (30%)

• Healthcare Compliance (HIPAA): Act as the technical SME for the HIPAA Security Rule, ensuring controls protect PHI, including controls monitoring and providing guidance to management for new systems.

• International Resilience (NIS2): Lead the alignment of our security posture with the NIS2 Directive, focusing on key areas in the directive for our European operations.

• Strategic Risk Assessments: Conduct deep-dive risk assessments for new technologies and vendors, ensuring compliance is baked in from the procurement stage.


Focus C: Security Awareness & Training (10%)

• Program Development: Manage the security awareness program that goes beyond "check-the-box" training. You will create engaging content for diverse audiences, from senior leadership to staff.

• Policy Promotion: Translate dense Information Security Policies into digestible, actionable "good practices" for IT administrators and data owners.

• Culture Building: Design targeted communication campaigns to increase internal reporting of security incidents and reinforce the importance of compliance.


Qualifications

• Experience: 5–7 years in IT Audit, IT Compliance, or Cyber Risk.

• Regulatory Knowledge: Expert-level understanding of SOX 404 (ITGCs) and a strong working knowledge of the HIPAA Security Rule and NIS2.

• Frameworks: Proficiency in applying NIST 800-53, ISO 27001, NIST CSF, or COBIT.

• Certifications: CISA is highly preferred; CISSP or CRISC is a major plus.

• Skills: The ability to explain to key stakeholders why a certain control is necessary without sounding like an auditor.

• Technology: Experience with ERP systems, such as SAP (ECC/S4 HANA) etc., cloud environments like Microsoft Azure, AWS etc., GRC systems such as Auditboard, Workiva or other.


Valuing different backgrounds:

LivaNova values equality and diversity. We are committed to ensuring that our recruitment process is fair, transparent and free from unlawful discrimination. Our selection process is driven by the key demands/requirements for the role rather than bias or discrimination on the basis of a candidate’s sex, gender identity, age, marital status, veteran status, non-job-related disability/handicap or medical condition, family status, sexual orientation, religion, color, ethnicity, race or any other legally protected classification.


Notice to third party agencies:

Please note that we do not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Services Agreement, we will not consider, or agree to, payment of any referral compensation or recruiter fee. In the event that a recruiter or agency submits a resume or candidate without a previously signed agreement, we explicitly reserve the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency.


Beware of Job Scams:

Please beware of potentially fraudulent job postings or suspicious recruiting activity by persons posing as LivaNova recruiters or employees. The scammers may attempt to solicit confidential, personal information, such as a social security number, or your financial information. LivaNova will never ask for fees prior/during/after the application process, nor will we ask for banking details or personal financial information in return for the assurance of employment. If you are concerned that an offer of employment might be a scam or that the recruiter is not legitimate, please verify by searching for “See Open Jobs” on , and check that all recruitment emails come from an @livanova.com email address.

Originally posted on Himalayas