Security and Privacy Compliance Analyst - Cybersecurity

The Company

Dexcom Corporation (NASDAQ DXCM) is a pioneer and global leader in continuous glucose monitoring (CGM). Dexcom began as a small company with a big dream: To forever change how diabetes is managed. To unlock information and insights that drive better health outcomes. Here we are 25 years later, having pioneered an industry. And we're just getting started. We are broadening our vision beyond diabetes to empower people to take control of health. That means personalized, actionable insights aimed at solving important health challenges. To continue what we've started: Improving human health.

We are driven by thousands of ambitious, passionate people worldwide who are willing to fight like warriors to earn the trust of our customers by listening, serving with integrity, thinking big, and being dependable. We've already changed millions of lives and we're ready to change millions more. Our future ambition is to become a leading consumer health technology company while continuing to develop solutions for serious health conditions. We'll get there by constantly reinventing unique biosensing-technology experiences. Though we've come a long way from our small company days, our dreams are bigger than ever. The opportunity to improve health on a global scale stands before us.

Meet the team: 

The R&D Cybersecurity team is a high-growth, fast-paced environment where you work with leading-edge, software teams in to ensure the security of modern diabetes medical device systems. You will work alongside highly skilled and passionate innovators who know how to deliver exceptional results. 

As a GRC Analyst within R&D Cybersecurity, you will assess cybersecurity and privacy compliance across products and supporting processes, translate regulatory requirements into actionable controls, maintain audit-ready evidence, and drive identified gaps through remediation and validated closure. You will partner with Engineering, Legal, Privacy, Quality, Regulatory Affairs, and business stakeholders to strengthen risk management and maintain compliance throughout the product lifecycle. 

Where you come in: 

• You will collaborate with cross-functional teams to ensure the interests of cybersecurity and privacy compliance are represented in the team’s processes.

• You will facilitate the completion of security compliance questionnaires for vendors, partners, and regulators. 

• Own end-to-end cybersecurity and privacy compliance assessments across the product development lifecycle, ensuring alignment with standards and regulations such as NIST CSF, NIST 800-53, SOC 2, ISO 27001, ENS, DPDP, GDPR, and EU MDR. 

• You continuously analyze newly released or revised regulations, standards, and guidance documents to identify compliance gaps. You then collaborate with program managers and product owners to ensure corrective actions are taken. 

• You maintain audit-ready compliance evidence in the designated GRC platform, collaborating with Legal, Quality, and Regulatory teams to support ongoing compliance with applicable standards and requirements. 

• In the event of an internal or external audit, you will be responsible for facilitating the documentation as proof of compliance. 

• Conduct cybersecurity and privacy due diligence for vendors, products, and technology partners. 

• Map regulatory and contractual requirements to internal policies, procedures, and technical controls. 

• Support the creation, review, and periodic update of cybersecurity policies, standards, procedures, and control documentation. 

• You partner with the team’s subject matter experts to ensure risk mitigation activities are well documented. 

What makes you successful:  

• You possess excellent communication and collaboration skills, along with a sharp problem-solving aptitude and a proactive attitude. 

• The ideal candidate will have extensive technical knowledge associated with cybersecurity and privacy standards within the Medical Device field or other regulated industries 

• Experience performing cybersecurity compliance or control assessments in medical devices, healthcare, pharmaceuticals, financial services, or another regulated industry. 

• Preferred certifications: CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor/Implementer, or equivalent. 

What you’ll get:  

• A front row seat to life changing CGM technology. Learn about our brave #dexcomwarriors community. 

• A full and comprehensive benefits program. 

• Growth opportunities on a global scale. 

• Access to career development through in-house learning programs and/or qualified tuition reimbursement. 

• An exciting and innovative, industry-leading organization committed to our employees, customers, and the communities we serve. 

Travel Required:  

• 0-5% 

Experience and Education Requirements: 

• Typically requires a Bachelor’s degree and a minimum of 5 – 8 years of related experience 

To all Staffing and Recruiting Agencies: Our Careers Site is only for individuals seeking a job at Dexcom. Only authorized staffing and recruiting agencies may use this site or to submit profiles, applications or resumes on specific requisitions. Dexcom does not accept unsolicited resumes or applications from agencies. Please do not forward resumes to the Talent Acquisition team, Dexcom employees or any other company location. Dexcom is not responsible for any fees related to unsolicited resumes/applications.

AI in Hiring Notice: We may use AI supported tools to help make our hiring process more efficient, consistent, and accessible for candidates around the world. All hiring decisions are made by people.

At Dexcom, we are committed to providing a fair and inclusive recruitment process, and welcome candidates of all genders and gender identities to apply. If any wording in this description appears unintentionally gendered or exclusionary, please be assured this is not intentional.

Should a reasonable accommodation be necessary to aid a disability, requests should be sent to Dexcom Talent Acquisition at talentacquisition@dexcom.com.