Example Company
Software engineer
- Location
- San Francisco
- Type
- Full time
- Compensation
- $150k-$200k
- Posted
- 2 days ago
Join a team building useful software. Work closely with engineering and design to turn new ideas into products.
Loading job details
Specialist, Information Security
- Type
- Full time
- Posted
- 7D AGO
About the role
The Information Technology (IT) team plays a key role in providing business enablement throughout ResMed. We are focused on application, infrastructure, and user productivity solutions, with innovation, efficiency and security. Our goal is providing customer oriented agile delivery, effective business partnership and state-of-the-art technology solutions.
Shape the future of secure innovation at global scale.
As an Information Security Specialist, you will play a critical role in protecting Resmed’s information assets, technology platforms, and business operations. Working within the Enterprise Security Group, you’ll lead security risk assessments across cloud environments, third-party solutions, and AI/ML-enabled products, helping teams make informed decisions while enabling innovation. Your expertise will guide secure design practices, strengthen risk management, and support compliance and audit readiness across a global organization. This is an opportunity to influence how security is embedded into technology initiatives, collaborate with stakeholders around the world, and make a meaningful impact on the systems and solutions that support Resmed’s mission.
What You'll Do
- Lead security engagement across global projects, aligning security practices with business and technical objectives.
- Conduct end-to-end security risk assessments for cloud-native and hybrid environments, including architecture and control reviews.
- Evaluate third-party products and services during onboarding and integration to ensure security and compliance requirements are met.
- Lead security reviews of AI/ML-enabled products, focusing on secure design, guardrails, and risk mitigation.
- Partner with project managers, product owners, architects, and developers to integrate security throughout the software development lifecycle.
- Communicate security risks, recommendations, and mitigation plans in a clear, business-relevant manner.
- Produce and maintain risk assessments, security summaries, remediation recommendations, and related documentation.
- Track risks and controls using GRC tools to ensure accountability and traceability.
- Stay current on emerging technologies, security threats, and industry best practices.
- Contribute to the continuous improvement of security frameworks, processes, and standards across the organization.
What You Bring
- Proven ability to independently lead security risk assessments across a variety of technologies and environments.
- Experience with third-party security risk management processes and platforms.
- Strong understanding of:
- Authentication and authorization
- Encryption
- Application and network security
- Data Loss Prevention (DLP)
- Endpoint protection
- Cloud Security Posture Management (CSPM)
- Cloud Access Security Broker (CASB)
- Privileged Access Management (PAM)
- Zero Trust Network Access (ZTNA)
- Logging and monitoring
- Vulnerability management
- Incident response
Nice to Have
- Bachelor’s degree.
- 5+ years of related information security experience.
- Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
- Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
- Knowledge of AWS cloud security controls.
- Experience within healthcare or manufacturing environments.
What Sets You Apart
- Strategic Thinker: You balance security requirements with business objectives and help teams make informed decisions.
- Influential Communicator: You translate complex security concepts into practical guidance that resonates with technical and non-technical audiences.
- Collaborative Partner: You build strong relationships across functions, cultures, and time zones to drive successful outcomes.
- Proactive Problem Solver: You identify risks early, assess impacts thoughtfully, and develop practical recommendations.
- Continuous Learner: You stay curious about emerging technologies, evolving threats, and new approaches to security.
- Ownership Mindset: You take accountability for delivering high-quality work and following through on commitments.
Why Join Resmed
Joining Resmed is more than helping to create a healthier world. It’s an opportunity to be part of a global organization where innovation, collaboration, and excellence come together to drive meaningful impact. You’ll work alongside talented teams, contribute to securing cutting-edge technologies, and help shape how security enables business success. We are committed to fostering a diverse and inclusive culture where every individual can thrive, bring their authentic self to work, and contribute new ideas. At Resmed, you’ll find a challenging, supportive, and inspiring environment where you can grow your career while helping make a difference.
Joining us is more than saying “yes” to making the world a healthier place. It’s discovering a career that’s challenging, supportive and inspiring. Where a culture driven by excellence helps you not only meet your goals, but also create new ones. We focus on creating a diverse and inclusive culture, encouraging individual expression in the workplace and thrive on the innovative ideas this generates. If this sounds like the workplace for you, apply now! We commit to respond to every applicant.
Similar roles
TFSB Information Security Risk ManagerLexusSecurity SpecialistFocus Financial Partners · Boston · Chicago
Information Security Associateathenahealth · Pune
Senior Security EngineerAkamai · Remote
Principal Information Security Customer Engagement EngineerLexisNexis · Sydney · Melbourne- Sr. Information Security Analyst – Data Pipelines and BI Automation - Hybrid 2 Days Chicago, IL - FreeWheelCompa · Chicago