Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Product Security & Compliance Lead

Corin Group62 open roles

Where
Raynham, MA, USA
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Security & Compliance LeadCorin Group · Raynham, MA, USA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Corin Group's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Corin Group postings stay open a median of 20 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 3 days ago

Corin Group median: 20 days open

The posting

Product Security & Compliance Lead Location: Raynham, MA

About the Role We are seeking an experienced Product Security & Compliance Lead to play a critical role in protecting the security of our products, infrastructure, and customer environments while ensuring compliance with healthcare cybersecurity standards and regulatory requirements. This is a highly collaborative and customer-facing position, requiring regular engagement with hospital IT and security teams, internal technology teams, and external partners. The successful candidate will be equally comfortable discussing technical cybersecurity controls with engineers as they are presenting security assurance information to non-technical stakeholders. The role combines product and infrastructure security, customer and vendor security assurance, cybersecurity compliance, and reporting activities, helping to maintain trust across all technology touchpoints throughout the product lifecycle.

Key Responsibilities

Product & Infrastructure Security Implement and maintain security controls across connected medical devices, software applications, and Azure cloud environments. Conduct vulnerability assessments, threat modelling exercises, and risk analyses for new product releases and major software updates. Partner with Software Engineering, R&D, and IT teams to remediate vulnerabilities and security findings. Manage endpoint protection, identity and access management (IAM), and security monitoring solutions within product and development environments. Lead vulnerability management activities, including Software Bill of Materials (SBOM) reviews, third-party component risk assessments, coordinated vulnerability disclosure, and remediation planning. Ensure cybersecurity activities are embedded and maintained throughout the Total Product Lifecycle, including design, development, verification, release, post-market surveillance, vulnerability management, and retirement. Hospital & Vendor Security Assurance Act as a key point of contact for hospital IT and Security teams, responding to vendor risk assessments and customer security questionnaires. Coordinate evidence gathering, control validation, and documentation required for customer security reviews. Maintain and manage a library of security assurance materials, including SOC 2 reports, ISO certifications, architecture diagrams, and penetration testing summaries. Support incident response activities and coordinate communications with customers and healthcare organisations when required. Compliance & Reporting Ensure compliance with cybersecurity and regulatory frameworks including IEC 81001-5-1, ISO 27001, NIST Cybersecurity Framework (CSF), HIPAA, and FDA cybersecurity guidance. Participate in internal audits, external audits, penetration testing activities, and regulatory assessments. Promote Privacy-by-Design principles and support data protection impact assessments, consent management processes, and privacy control implementation. Track, monitor, and report security metrics, vulnerabilities, risks, and remediation activities to leadership teams. Maintain security policies, standards, procedures, and supporting documentation to ensure ongoing regulatory alignment.

About You To be successful in this role, you will bring:

5+ years' experience in cybersecurity, ideally within healthcare, medical device, MedTech, or other highly regulated industries. Proven experience managing hospital security reviews, vendor risk assessments, and customer security questionnaires. Strong knowledge of cybersecurity and compliance frameworks, including ISO 27001, IEC 81001-5-1, NIST CSF, HIPAA, and FDA cybersecurity requirements. Hands-on experience with cloud and infrastructure security, preferably within Azure environments. A solid understanding of vulnerability management, secure software development lifecycle (Secure SDLC), and cybersecurity risk management. Excellent written and verbal communication skills with the ability to influence and build relationships across technical and non-technical audiences. Strong organisational skills and the ability to manage competing priorities in a fast-paced environment. Professional cybersecurity certifications such as CISSP, CISM, HCISPP, or equivalent are highly desirable.

Why Join Us? This is an exciting opportunity to shape and mature product cybersecurity within a growing healthcare technology environment. You'll have the chance to work at the intersection of healthcare, innovation, compliance, and security, helping deliver solutions that make a meaningful difference to patients and healthcare providers worldwide.

Opportunity to work in a highly regulated and quality driven environment. Be part of a collaborative team committed to continuous improvement. Contribute directly to the quality and safety of products that make a difference. Professional development and career growth opportunities. The base pay range for this position is $120,000 - $140,000. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set. Employee referral program where you can earn incentives for each successful hire you recommend

If you are passionate about cybersecurity, compliance, and building trust in connected healthcare technologies, we'd love to hear from you.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Corin Group's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Corin Group's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Corin Group's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.