ASPAC Cybersecurity Expert
Shanghai, CN
What are your responsibilities at bioMérieux ?
Reporting directly to the EMEA & ASPAC Cybersecurity Manager in charge of bioMerieux cybersecurity, you oversee cybersecurity activities in cooperation with product teams.
- As a Cybersecurity Specialist, you are a key contributor to the development and strengthening of our products & corporate cybersecurity interacting at different levels of the organization.
- You help define and carry out priority projects intended to support the development of all stakeholders involved in the cybersecurity of our products & IS solutions.
- You coordinate and support both IS solutions and product cybersecurity risk analysis process with bioMérieux projects and support contacts.
- You ensure an active technological and regulatory surveillance on cybersecurity.
- You are responsible for the commitments made to internal customers, both on the scope, as well as deliverables, costs and planning.
Relational skills for the position:
- You act as an expert and facilitator with the various actors involved in both corporate IS & product cybersecurity activities.
- You show initiative and are committed to make you subjects, your colleagues and your team progress, locally as well as globally.
- You establish and maintain strong partnership relationships with all stakeholders (Global teams, product teams, R&D Teams)
Job execution process:
- You are responsible for the execution and improvement of our processes and procedures in collaboration with the R&D stakeholders and the product cybersecurity team.
- You contribute to define and monitor the budget items in your scope in close collaboration with your manager.
- You identify and share the projects to be implemented to achieve the expressed ambitions (planning, budget, resources).
Who are you?
With at least 5 years of experience in cybersecurity and with knowledge in software development, you have demonstrated the following skills:
- Sense of initiative and strength of proposal
- Relational skills with a strong aptitude for teamwork in an international context and be able to work independly with remote peers, direct manager and key regional business stakeholders (eg. GCS, MKT and etc.) in different timezones.
- In-depth knowledge of cybersecurity and more specifically of the cybersecurity ecosystem of medical devices.
- Broader knowledge of cybersecurity regulation & law in varies ASPAC countries, eg. China, India and South East Countries
- In event of Cyber incident, you will coordinate and react the critical cyber events in local regional timezone.
- Your mastery of security risk analysis is essential to the success of this position
- Good understanding of software development cycles, software architectures and applicable security controls.
- Knowledge of security standards such as UL2900-1/UL2900-2-1, ISO27001, CMMC would be appreciated.
- Good knowledge of Microsoft Defender Suite (Phishing awareness, anti-virus, administration)
- Documentation follow-up & creation ( guidelines, procedures..)
- Project management fundamentals
- Fluent English (written, oral)
- French language skills are a plus