Senior Cybersecurity Engineer (Brisbane)

Senior Cybersecurity Engineer (Brisbane)

17 Oct
|
Enovis Surgical Australia
|
Brisbane

17 Oct

Enovis Surgical Australia

Brisbane

Who We Are
ABOUT ENOVISTM Enovis Corporation (NYSE: ENOV) is an innovation-driven medical technology growth company dedicated to developing clinically differentiated solutions that generate measurably better patient outcomes and transform workflows.
Powered by a culture of continuous improvement, global talent and innovation, the Company's extensive range of products, services and integrated technologies fuels active lifestyles in orthopedics and beyond.
For more information about Enovis, please visit .
What You'll Do
At EnovisTM we pay attention to the details.
We embrace collaboration with our partners and patients, and take pride in the pursuit of scientific excellence — with the goal of transforming medical technology as we know it.
Because that's how we change the lives of patients for the better.
And that's how we create better together.
Why work at Enovis?
See for yourself.
As a key member of the Enabling Technologies you will play an integral part in helping Enovis drive the medical technology industry forward through transforming patient care and creating better patient outcomes.
Job Title: Senior Cybersecurity Engineer
Location: Fortitude Valley - Australia
Business Unit Description: Enabling Technologies
We are looking for a Senior Cybersecurity Engineer to lead the cybersecurity program in the Enabling Technologies division.
The primary focus will be our cloud-based Software as a Medical Device (SaMD) platform, ASTRA Portal.
The role is hands-on, technically focused and spans product security, cloud security, application security, vulnerability management, security monitoring, identity and access management, cybersecurity risk and regulatory assurance.
The system is deployed in multiple countries/regulatory regions.
You will work closely with software engineering, cloud/platform engineering, quality and regulatory teams, and external stakeholders to ensure that cybersecurity is designed into the product and its supporting infrastructure throughout the development and operational lifecycle.
This role is particularly suited to someone who enjoys working across the boundary between cybersecurity engineering, software development, cloud infrastructure and regulated medical-device environments.
Key Responsibilities
Cybersecurity Governance, Risk and Compliance
Own and maintain the groups GRC platform and related processes
Track cybersecurity findings, corrective actions and remediation through to completion
Develop and maintain internal cybersecurity policies, standards and procedures
Customer Security and Assurance




Act as a technical cybersecurity contact for customer and hospital security assessments.
Coordinate and complete cybersecurity questionnaires and security assessments received from hospitals, healthcare organisations and other customers.
Provide accurate, technically defensible responses regarding application, cloud, infrastructure, data protection, access control, vulnerability management, monitoring and incident response.
Maintain a reusable knowledge base of security responses, architecture information and supporting evidence to improve the efficiency and consistency of customer assessments.
Product and Application Security
Work closely with, influence and contribute to security throughout the software development lifecycle of the ASTRA Portal Support application testing and security analysis including SAST, DAST, dependency, container analysis tooling
Review cloud and system architectures for security risks and areas of improvement
Participate in monitoring, triage and review of system vulnerabilities
Cloud Cybersecurity
Help maintain a consistent security posture across our multiple AWS accounts, environments and geographic regions
Assist with the operation of relevant tooling including SIEM, CSPM and the observability stack
Review and maintain IAM ensuring least privileges and operational efficiency
Regulatory, Standards and Policies
Stay up to date with the relevant standards and regulations across the different regions ASTRA Portal is deployed in including NIST CSF, GDPR, POPIA, Australian Privacy Principles
Operate within a regulated industry under ISO ***** and IEC *****
Security enablement
Help embed secure-by-design and secure-by-default principles into engineering practices
Provide cybersecurity guidance and technical support to engineering teams
Develop security standards, guidance and reusable patterns for engineering teams
Promote security-by-design practices throughout the software development lifecycle
Required Experience
At least 6 year's experience with a proven track record in cybersecurity for a cloud-based web application
Experience in medical device, healthcare, SaMD or other regulated software environments
Experience with GRC platforms,



cybersecurity risk management and security control frameworks.
Strong understanding of application security and secure software development practices, including common web application vulnerabilities and security testing approaches
Demonstrated experience with vulnerability management, including identifying, assessing, prioritising and coordinating remediation of security vulnerabilities
Solid written and verbal communication skills
Solid understanding of cloud security principles and best practices
Strong experience with at least one programming language, with the ability to understand and review software from a security perspective
Desired Experience
Prior experience within the AWS ecosystem
Experience with an infrastructure as code (IaC) system
Hands on experience with SIEM and CSPM systems
Experience responding to customer or third-party security assessments and security questionnaires, particularly within healthcare or enterprise environments
Familiarity with standards such as ISO *****, IEC *****, NIST CSF 2.0 or ISO *****
Knowledge of auditability, traceability, and validation requirements in regulated systems "Creating better together".
It's the Enovis purpose, and it's what drives us and empowers us every day on a global scale.
We know that the power to create better – for our customers, our team members, and our shareholders – begins with having the best team, pursuing common goals, operating at the highest levels, and delivering extraordinary outcomes.
EQUAL EMPLOYMENT OPPORTUNITY
Enovis provides equal employment opportunities based on merit, experience, and other work-related criteria without regard to race, color, ethnicity, religion, national origin, sex, age, pregnancy, disability, veteran status, or any other status protected by applicable law.
We also strive to provide reasonable accommodation to employees' beliefs and practices that do not conflict with Enovis policies and applicable law.
We value the unique contributions that every employee brings to their role with Enovis.
Join us in creating better together.
ABOUT ENOVIS
Enovis Corporation (NYSE: ENOV) is an innovation-driven medical technology growth company dedicated to developing clinically differentiated solutions that generate measurably better patient outcomes and transform workflows.
Powered by a culture of continuous improvement, global talent and innovation, the company's extensive range of products, services and integrated technologies fuels active lifestyles in orthopedics and beyond.
For more information about Enovis, please visit .
#J-*****-Ljbffr

📌 Senior Cybersecurity Engineer (Brisbane)
🏢 Enovis Surgical Australia
📍 Brisbane

Reply to this offer

Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.

Subscribe to this job alert:

Get the latest job offers by email for: senior cybersecurity engineer (brisbane) / brisbane

Subscribe to this job alert:

Get the latest job offers by email for: senior cybersecurity engineer (brisbane) / brisbane