Job Details Description
GROW WITH US:
Headquartered in San Diego with customers all over the world, Tandem Diabetes Care is dedicated to making the lives of people with diabetes better and better through relentless innovation. “In Tandem” means together, and we strive to embody that in every aspect of our business. Our offices are centrally located north of Downtown with easy access to the freeway.
DIABETES IS ALL WE DO:
At Tandem, Diabetes is all we do. We are the makers of the only color, touch-screen insulin pump that is capable of remote feature updates and compatibility with continuous glucose monitoring. Read more about our company and check out our latest product features and capabilities here: t:slim X2™ Insulin Pump with Control-IQ™ Technology
In addition to innovative technology, we have a culture that fosters the idea that the happiest people are the most productive people. We treat our fellow employees like friends and family, and the company like our own home. This universal respect allows us the freedom to be ourselves and to be effective at our jobs, knowing at the end of the day that we can trust everyone to do the right thing, for each other and for the company. You can learn more about our culture and life at tandem here: https://www.tandemdiabetes.com/careers/life-at-tandem and See what our customers are saying here: #tsliminthewild
A DAY IN THE LIFE:
The Manager, Cyber Security is responsible for implementing world-class information security capability at a growing company. Additional responsibilities include success of cyber security initiatives, while focused on best practices for security systems implementation, security devices, and enabling security practices. A member of a successful and forward-looking IT team that is central to propelling Tandem into the next phase of growth by leveraging data, analytics and data science. This role will deliver the implementation of a contemporary and robust information security program at a rapidly growing company.
PRIMARY DUTIES & RESPONSIBILITIES:
Identifies, evaluates and reports on information security risks, practices and projects to the Cyber Security Director, and provide subject matter expertise on security configurations and best practices. Lead the technical configuration and implementation of security projects within Identity and Access Management, Provisioning, Authentication, Authorization, Monitoring & Certifications, Auditing and Reporting. In alignment with the established organizational framework and best practices. Assist with execution of cyber security roadmap including security of hybrid cloud environment, web services, mobile computing, access control, security, Single-Sign-On (SSO), user provisioning/deprovisioning, and federation. Build, configure, and architect, cyber security platforms within enterprise and product environments. Aids in the development of Tandem’s understanding of security beyond a ‘compliance-only’ view. Acts as the champion for the product information security program and foster a security-aware culture. Leads technical implementation of information security solutions that are innovative, cost-effective, and minimally disruptive. Collaborates with enterprise architects, infrastructure, product and applications teams to ensure that technologies are developed and maintained according to security policies and guidelines. Implement regular intrusion detection and vulnerability reporting, internal and external IT audit groups reviews, and the delivery of required fixes. Monitors the industry and external environment for emerging threats and advise relevant stakeholders on appropriate courses of action. Assist with incident response planning and the investigation of security breaches, and assists with any associated disciplinary, public relations and legal matters. Assist with the creation, communication and implementation of a process for managing data loss, fraud, vendor risk and other third-party risk. Develops documentation of the cyber security processes, procedures, and practices such that they align with internal and external security requirements and are integrated with the overall priorities of the enterprise. Acts as security advocate in cross-functional systems and technology projects. Advocates and evangelizes security awareness at all levels of the organization. Ensures work is performed in compliance with company policies, including Privacy/HIPAA, and other legal and regulatory requirements. YOU’RE AWESOME AT :
Knowledge, skills & abilities:
Experience driving and leading enterprise projects and team goals. Experience leading the technical configuration and implementation of security projects within Identity and Access Management, Provisioning, Authentication, Authorization, Monitoring & Certifications, Auditing and Reporting. In alignment with the established organizational framework and best practices. Experience with security-related technologies including Firewalls, IDS, SIEM, Vulnerability scanners, Anti-Virus, Data Leak Prevention, two factor authentication, and VPN. Experience with web-application vulnerability tools and testing. Application-side security with experience in secure coding techniques, tools and analysis. Experience implementing or assessing security in Office 365 and Microsoft Azure Cloud environments. Excellent analytical, evaluative, and problem-solving abilities. Experience implementing industry-based information security and/or control frameworks (NIST Cyber Security Framework, NIST Risk Management Framework, CIS CSC, HIPAA, SOX, GDPR, ISO 27001&2, SSAE18 (SOC1&2), SANS Top 20, etc.). Ability to communicate technical issues to non-technical end users. Strong customer-service orientation. Skilled at creating an environment which supports the timely exchange of high-quality information. Proficient at promoting effective working relationships in cross-functional teams. Experience educating on and advocating for the importance of security programs across all levels of the organization. Adaptability to quickly and proactively implement change initiatives, providing guidance to others in meeting changing needs. Ability to inspire and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals, an innovative leader, problem solver and consultant. Ability to evangelize IT security to make it a critical part of business operations; build trust and respect for the security function. Excellent written and verbal communication, interpersonal and collaborative skills. Technical acumen of cloud, SaaS, and IoT architectures, and their implications on information security strategy. Technical acumen including but not limited to: OSI, IT infrastructure, cloud, application development languages, tools and frameworks, database technologies, web technologies, next gen mobile, network architecture, enterprise architecture, and directory services. Security technology acumen and experience including but not limited to firewall, intrusion detection, cyber-attack tools and defenses, encryption, certificate authority, web filtering, anti-malware, anti-phishing, identity and access management, multi factor authentication. Minimum certifications/educational level:
BS in computer science, engineering, or a related field; (graduate degree preferred). Professional certifications, such as a CISSP, CISM, CCSP preferred. Minimum experience:
8 plus years of information security/cybersecurity experience. 5 years prior experience leading a cybersecurity department and associated staff is preferred. Proven technical delivery experience executing cyber security implementations at similar companies. Experience in regulated industries. SCOPE:
Receives assignments in the form of objectives. Follows processes and operational policies in selecting methods and techniques for obtaining solutions; determines how to use resources to meet schedules and goals. Works on issues of diverse scope which require evaluation of a variety of factors and an understanding of functional area objectives and trends. Erroneous decisions or failure to achieve results may add to costs and impact the short-term goals of the organization. WHAT’S IN IT FOR YOU?
At Tandem, our employees are just as important as our customers! Not only do we hire the best, we reward, develop, and retain them too. At Tandem we offer competitive compensation packages, superb medical, dental and vision, a discounted stock purchasing plan, fitness discounts, generous PTO, casual work attire and more! For a full list of benefits please review our perks page at https://www.tandemdiabetes.com/careers/benefits .
BE YOU, WITH US!
We’re always looking for awesome, forward-thinking achievers to join our workforce. We are committed to making sure our company fully reflects the diverse consumers who use our product. We are making strides towards this goal and are firmly committed to being an equal opportunity employer and maintaining a diverse and inclusive environment.
We love a good referral! If you know someone that would be a great fit for this position, please share!
If you are applying for this job and live in California, please read Tandem’s CCPA Notice:
https://www.tandemdiabetes.com/careers/california-consumer-privacy-act-notice-for-job-applicants Apply Here