Product Security & Compliance Lead

Corin Group•Raynham, MA

21h•$120,000 - $140,000

About The Position

The Product Security & Compliance Lead protects the security of Corin’s products, infrastructure, and customer environments while supporting compliance with healthcare cybersecurity standards and regulatory requirements. This collaborative, customer-facing role engages regularly with hospital IT and security teams, internal technology teams, and external partners. It requires communicating technical cybersecurity controls to engineers and presenting security assurance information to non-technical stakeholders. The role brings together product and infrastructure security, customer and vendor security assurance, cybersecurity compliance, and reporting. It supports trust across technology touchpoints throughout the product lifecycle.

Requirements

At least 5 years of experience in cybersecurity, ideally within healthcare, medical device, MedTech, or another highly regulated industry.
Proven experience managing hospital security reviews, vendor risk assessments, and customer security questionnaires.
Strong knowledge of cybersecurity and compliance frameworks, including ISO 27001, IEC 81001-5-1, NIST CSF, HIPAA, and FDA cybersecurity requirements.
Hands-on experience with cloud and infrastructure security, preferably in Azure environments.
Solid understanding of vulnerability management, Secure SDLC, and cybersecurity risk management.
Excellent written and verbal communication skills, with the ability to influence and build relationships with technical and non-technical audiences.
Strong organisational skills and ability to manage competing priorities in a fast-paced environment.

Nice To Haves

Professional cybersecurity certifications such as CISSP, CISM, HCISPP, or equivalent.

Responsibilities

Implement and maintain security controls across connected medical devices, software applications, and Azure cloud environments.
Conduct vulnerability assessments, threat modelling exercises, and risk analyses for new product releases and major software updates.
Partner with Software Engineering, R&D, and IT teams to remediate vulnerabilities and security findings.
Manage endpoint protection, identity and access management (IAM), and security monitoring solutions within product and development environments.
Lead vulnerability management, including Software Bill of Materials (SBOM) reviews, third-party component risk assessments, coordinated vulnerability disclosure, and remediation planning.
Embed and maintain cybersecurity activities throughout the Total Product Lifecycle, including design, development, verification, release, post-market surveillance, vulnerability management, and retirement.
Serve as a key point of contact for hospital IT and security teams, responding to vendor risk assessments and customer security questionnaires.
Coordinate evidence gathering, control validation, and documentation for customer security reviews.
Maintain a library of security assurance materials, including SOC 2 reports, ISO certifications, architecture diagrams, and penetration testing summaries.
Support incident response activities and coordinate communications with customers and healthcare organisations when required.
Ensure compliance with IEC 81001-5-1, ISO 27001, NIST Cybersecurity Framework (CSF), HIPAA, and FDA cybersecurity guidance.
Participate in internal and external audits, penetration testing activities, and regulatory assessments.
Promote Privacy-by-Design principles and support data protection impact assessments, consent management processes, and privacy control implementation.
Track, monitor, and report security metrics, vulnerabilities, risks, and remediation activities to leadership teams.
Maintain security policies, standards, procedures, and supporting documentation to ensure ongoing regulatory alignment.