Pr. Cyber Information Assurance Analyst

Medtronic•Duluth, GA

2d•Onsite

About The Position

We anticipate the application window for this opening will close on - 24 Dec 2025 At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world. A Day in the Life This role will bring the specialized expertise and structure needed to navigate complex regulatory, contractual, and industry requirements. This role will: Translate regulations into actionable controls, measure and reduces organizational risk, strengthens customer and stakeholder confidence, enables efficient cross-functional alignment, and will build and operate scalable, repeatable processes. At Medtronic you can begin a life-long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world. At Medtronic, we bring bold ideas forward with speed and decisiveness to put patients first in everything we do. In-person exchanges are invaluable to our work. We're working onsite 4 days a week as part of our commitment to fostering a culture of professional growth and cross-functional collaboration as we work together to engineer the extraordinary. In your role, you may work from the following Medtronic sites: A Day in the Life The Cybersecurity Information Assurance Principal is a recognized expert responsible for defining strategic direction and operationalizing key processes for cybersecurity compliance, measurement, documentation, and enforcement. This role requires considerable strategic and operational independence across all areas. This contract role is highly strategic and execution-focused, with the following expectations:

Requirements

7+ years of relevant experience in compliance, risk management, or GRC functions with a bachelors degree or 5+ years of relevant experience with an advanced degree or 12+ years of relevant experience with a high school diploma or equivalent.

Nice To Haves

Applicable certifications for cyber and/or compliance (e.g. CISSP, CISA, CRISC, CISM)
Familiarity with compliance systems (E.g. OneTrust , Logic Gate, Archer, etc.)
Strong understanding of system administration principles and user management.
Excellent analytical, communication, and problem-solving skills.
Previous Medtronic experience
Bachelor’s or advanced degree

Responsibilities

Process Development for Control & Regulatory Assessments Design and document repeatable processes for assessing the implementation and effectiveness of cybersecurity controls.
Develop assessment methodologies aligned with internal policies, industry frameworks (e.g., NIST, ISO 27001), and regulatory requirements (e.g., GDPR, HIPAA, FDA, NIST2.0, NIST AI, NIS2, SOX, etc.).
Create clear workflows for pre-assessment scoping, evidence collection, validation, scoring, and reporting.
Remediation Management Framework Build a structured process for tracking control deficiencies, assigning remediation tasks, and following up on resolution status.
Define escalation protocols and reporting formats for unresolved issues and overdue remediation items.
Support control owners with guidance on remediation expectations and timelines.
Documentation, Training & Continuous Improvement Draft comprehensive documentation for all developed processes, procedures, and related templates.
Develop and deliver training materials and user guides for stakeholders (e.g., control owners, risk assessors).
Identify opportunities to improve the efficiency and effectiveness of compliance measurement and enforcement.
Stay up to date with evolving cybersecurity and privacy regulations and advise on required updates to processes or tools.
Stakeholder Coordination & Communication Represents the organization as primary contact for specific projects and initiatives, communicating with internal and external customers and vendors at various levels.
Collaborate with legal, privacy, risk, and security teams to ensure processes align with broader enterprise compliance requirements.
Coordinate with GCISO compliance lead(s), internal and external auditors as needed to support formal compliance reviews or assessments.
Serve as a central point of contact for questions or issues related to cyber control compliance processes.

Benefits

Medtronic offers a competitive Salary and flexible Benefits Package
A commitment to our employees lives at the core of our values.
We recognize their contributions.
They share in the success they help to create.
We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.
Health, Dental and vision insurance, Health Savings Account, Healthcare Flexible Spending Account, Life insurance, Long-term disability leave, Dependent daycare spending account, Tuition assistance/reimbursement, and Simple Steps (global well-being program).
Incentive plans, 401(k) plan plus employer contribution and match, Short-term disability, Paid time off, Paid holidays, Employee Stock Purchase Plan, Employee Assistance Program, Non-qualified Retirement Plan Supplement (subject to IRS earning minimums), and Capital Accumulation Plan (available to Vice Presidents and above, or subject to IRS earning minimums).

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume