Security Platform Solution Architect - Digital Products And Enablement

The Position

Who We Are

Roche’s expanding digital product portfolio demonstrates its commitment to provide healthcare professionals, laboratories, and patients with digital and digitally-enabled solutions that transform patient care. The existing product portfolio includes decision support systems, data management solutions, and workflow solutions. At the center of these diverse types of solutions is always patient data security and privacy as the highest priority for Roche.

In this context, Roche has built a global team that builds, secures, and operates infrastructure platforms (cloud and on-prem) for its digital products. This team is working with a high freedom to operate in a self-organized setup and is responsible for tackling the cybersecurity, compliance, and infrastructure challenges of the healthcare industry while enabling high-velocity product development.

The Position

In the position of Platform Cloud Security Architect you will join the security team in Informatics supporting the Digital Products and Enablement domain.

You will design and deliver security solutions that align with product architecture standards and advance the architecture toward the target state. You will lead, facilitate, analyze, design and prototyping tasks required to ensure that Roche Diagnostics products end-to-end security and privacy are designed and evolve appropriately.

You will be working with our business groups to understand their business processes and information needs and collaborate with other members of our informatics organization to identify and design solution options that support the business needs.

In addition, you will:

• Define the cyber strategy & capabilities for Roche Diagnostics products and development environments to protect patients, intellectual property (IP) and patient health information (PHI)
• Design, prototype and implement technical controls considering regulatory and legal requirements to achieve full compliance
• Contribute to the development and implementation of security and privacy risk management governance and insights
• Define short, mid and long-term roadmaps, specifying technologies and measures to enable the secure development of Roche Diagnostics software
• Define security and privacy requirements for Roche Diagnostics products and development environments including the supply chain workflows, such as but not limited to data classification and risk assessments
• Continuously review the proposed Roche Diagnostics platform architectures adapting to possible unpredicted changes and time to market prioritization, assessing risks and their impact to provide adequate remediations in line with established standards and overall posture

Ideally this position will be located in Mississauga (Canada).

Who you are

You’re looking for a challenge where you have the opportunity to pursue your interests across functions and geographies. Where your passion for technology, delivery, reliability, and operational excellence will impact the lives of patients fighting cancer and many other disease areas in the future.

You are a team player with common sense and you like bringing others up to speed on technology.

You have a University degree in computer science, engineering, or other related fields, or equivalent experience. You bring experience working in a multicultural environment and proven cultural awareness.

You have;

• 4+ years of related work experience in Security Risk Management
• 5+ years of related work experience in cloud platforms: AWS (preferred)/Azure/GCP
• 5+ years related technical experience in Product Security Architecture and Engineering

Furthermore, you bring solid experience in:

• Working with product development environments and CI/CD pipelines
• Application security principles and technical implementation
• Linux and Windows hardening
• Conducting or being the subject of security and/or privacy audits
• One or more programming languages (preferably Java or Python)
• As well as: a strong understanding of applicable and accepted audit and risk frameworks (such as COBIT, NIST, and ISO), standards (ISO 27000 family, HITRUST) and government guidelines and laws (HIPAA, GDPR)
• Vulnerability management and security incident handling

You bring the following competencies:

• Ability to produce high quality policy documentation and compliance reports
• Ability to take ownership and be effective with limited supervision
• Understanding of cloud security technologies and architectures, including security controls, encryption, identity and access management (IAM), network security, and data protection
• Healthcare software experience preferred
• Demonstrated ability to adapt to new technologies and learn quickly
• Industry recognized certifications provided by GIAC, ISACA, ISC2
• Strong organizational skills and ability to prioritize and manage multiple projects simultaneously
• Experience with clinical workflow solutions or in a clinical environment is a plus
• Ability to lead security initiatives and work with security teams to ensure that cloud-based systems are secure and compliant
• Effective at engaging with teams in various functions and across different levels

Roche embraces diversity and equal opportunity in a serious way. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are,the better our work will be.

If you still have questions then please check our FAQs and videos on careers.roche.ch/faq.

What we offer at Roche Canada:

• Flexible options allowing you to accommodate your daily schedule
• Roche Connect stock purchase options
• Visit our website to check out benefits: - https://myrochebenefits.roche.com/public/welcome
• Emphasis on continuous personal and professional self-development supported by a dedicated training budget (training, certifications, conferences, diversified career paths etc.)
• Modern and collaborative open space working environment with comfortable facilities
• Hybrid working model;
• Generous vacation and Roche Days for time off work
• Experienced and professional colleagues and workplace that supports innovation and new ideas
• Stable working environment with attractive compensation and rewards package
• Annual bonus payment based on performance
• Company’s emphasis on employees’ wellness and work-life balance

The next step is yours. To apply today, click on the "Apply online" button below.

Who we are

At Roche, more than 100,000 people across 100 countries are pushing back the frontiers of healthcare. Working together, we’ve become one of the world’s leading research-focused healthcare groups. Our success is built on innovation, curiosity and diversity.

Roche Pharma Canada has its office in Mississauga, Ontario and employs over 850 employees. The Mississauga facility is bright, vibrant, fosters collaboration and teamwork, and is reflective of Roche's truly innovative culture.

As of January 4, 2022, Roche requires all new employees who work in Canada to be fully vaccinated against COVID-19 on the date they take office. This requirement is a condition of employment at Roche that applies regardless of whether the position is on a Roche campus or remotely. If you have a valid reason for not being fully immunized, which is limited to certain specific medical reasons or other valid reasons protected by applicable human rights laws, you may request an exemption and / or adaptation measures regarding this vaccination requirement.

Roche is an Equal Opportunity Employer.