As a Principal Cybersecurity Engineer at Medtronic, you will serve as the Principal OT Risk Governance Analyst, leading the development, implementation, and oversight of robust risk management and governance frameworks for our Operational Technology (OT) environments in manufacturing. Your expertise will ensure that OT security controls align with corporate policies, industry regulations, and cybersecurity best practices, playing a critical role in Medtronic's mission to champion healthcare access and innovation.
A Day in the Life
You will drive cybersecurity excellence within our OT environments by:
- Leading OT risk assessments, identifying and rating risks based on the established risk matrix.
- Maintaining the risk register and tracking risks specifically related to manufacturing environments.
- Ensuring compliance with NIST CSF, NIS 2, and other relevant cybersecurity frameworks and regulations.
- Collaborating with IT, OT, and compliance teams to align cybersecurity policies with operational requirements.
- Establishing and maintaining OT security governance frameworks, policies, and procedures.
- Defining roles and responsibilities for OT security within manufacturing operations.
- Developing tailored security awareness programs for OT personnel, engineers, and plant operators.
- Providing guidance on secure architecture, network segmentation, and access controls for OT systems.
- Supporting the cybersecurity incident response process, including detection, response, and recovery planning.
- Collaborating with IT security teams, SOC analysts, and plant personnel to investigate and mitigate security incidents.
- Ensuring disaster recovery plans incorporate IT and OT system resilience and recovery.
- Assisting manufacturing teams with initial documentation of disaster recovery plans, tabletop exercises, and tracking updates.
- Acting as a key advisor for manufacturing operations teams and cybersecurity stakeholders.
- Developing training on IT and OT security risks, governance frameworks, and compliance expectations.
- Facilitating security awareness sessions for IT and OT engineering teams.
Required Qualifications and Experience
- Bachelor's degree in Cybersecurity, Information Technology, Engineering, or a related field with 14+ years of overall experience.
- 5+ years of experience in OT security, risk management, or governance in manufacturing, energy, or critical infrastructure.
- Strong knowledge of ICS/SCADA systems, industrial protocols (Modbus, OPC, DNP3, etc.), and IT and OT asset management.
- Experience with risk assessment methodologies, audit frameworks, and regulatory compliance.
- Familiarity with frameworks like NIST 800-82, IEC 62443, ISO 27001, and the Purdue Model for ICS Security.
- Strong communication and leadership skills for cross-functional collaboration.
Preferred Qualifications
- Industry certifications: CISM, CISSP, CRISC, GICSP, ISA 62443, or equivalent.
- Experience with vulnerability management, threat modeling, and incident response in manufacturing environments.
- Knowledge of firewalls, network segmentation, and endpoint protection for ICS environments.
Benefits & Compensation
Medtronic offers a competitive Salary and flexible Benefits Package. We are committed to our employees, recognizing their contributions and providing resources to support you at every career and life stage.
About Medtronic
Medtronic leads global healthcare technology, boldly attacking the most challenging health problems facing humanity by searching out and finding solutions. Our Mission to alleviate pain, restore health, and extend life unites a global team of 95,000+ passionate people. We are engineers at heart, putting ambitious ideas to work to generate real solutions for real people, leveraging talent, diverse perspectives, and courage to engineer the extraordinary.
