Sr. Manager, Medical Device Cyber Security

Passionate about precision medicine and advancing the healthcare industry? Recent advancements in underlying technology have finally made it possible for AI to impact clinical care in a meaningful way. Tempus' proprietary platform connects an entire ecosystem of real-world evidence to deliver real-time, actionable insights to physicians, providing critical information about the right treatments for the right patients, at the right time.

What You'll Do

• Program Management & Strategy Execution: Develop, implement, and continuously mature the Medical Device Cybersecurity roadmap, policies, and Standard Operating Procedures (SOPs), aligning them with the overarching enterprise data security strategy.
• Product Security & Engineering Partnership: Partner with R&D and engineering teams to embed secure-by-design principles and Secure Software Development Life Cycle (SSDLC) practices into medical device development. Define and manage the strategy for Software Bill of Materials (SBOM) generation and maintenance across all device product lines. Coordinate with Cloud Security, Application Security, and Vulnerability Management Information Security teams to integrate their services into Tempus Medical Devices.
• Regulatory Compliance & Quality Assurance: Ensure device design and lifecycle management align with FDA pre-market and post-market cybersecurity guidelines. Author, review, and maintain cybersecurity documentation required for regulatory submissions (e.g., 510(k), De Novo, PMA). Coordinate with the Quality Management team to integrate cybersecurity into the enterprise Quality Management System (QMS).
• Leadership & Mentorship: Mentor, and develop the Medical Device Cybersecurity Analyst(s), guiding their daily tactical execution, vulnerability assessments, and professional growth. Serve as the primary Subject Matter Expert (SME) for Medical Device Cybersecurity across the organization and provide education to cross-functional teams on the program.
• Threat & Vulnerability Management: Oversee the continuous monitoring, vulnerability scanning, and patching strategies for deployed medical devices. Manage engagements with penetration testing conducting assessments on Tempus hardware and embedded systems.

Qualifications

7+ years of technical experience in information security in the tech or healthcare industry. Deep understanding of FDA Cybersecurity Guidance (Pre-market and Post-market), ISO 14971, and ISO 13485 Proficiency in threat modeling methodologies (STRIDE, PASTA) and secure architecture design. Industry-recognized certifications such as CISSP, HCISPP, CISM, or relevant SANS certifications are preferred. Ability to manage several programs at once and work proactively to align multi-disciplinary stakeholders. Excellent written and verbal communication skills, including the ability to act as translator among diverse teams of biologists, medical professionals, engineers, operators, and data scientists.

#LI-HR1 #LI-Hybrid

CHI: $150,000-$210,000 The expected salary range above is applicable if the role is performed from Illinois and may vary for other locations (California, Colorado, New York). Actual salary may vary based on qualifications and experience.

Tempus offers a full range of benefits, which may include incentive compensation, restricted stock units, medical and other benefits depending on the position.

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Tempus was founded in August of 2015 by Eric Lefkofsky, after his wife was diagnosed with Breast Cancer. Shortly after he founded the company in an effort to bring the power of technology and artificial intelligence to cancer care, he convinced Ryan Fukushima to join as the company’s first employee. Ryan and Eric began assembling a world class team, focused on building the first version of a platform capable of ingesting real time healthcare data in an effort to personalize diagnostics. We built the platform for oncology and have expanded it to neuropsychiatry, cardiology, infectious disease (through COVID), and radiology. Despite our rapid growth, our mission remains the same—to help make sure patients are on the right drug at the right time, so they can live longer and healthier lives. We’re looking for people who can change the world. Who question the status quo and don’t shy away from tough problems. For the builders who are never done building and the learners who are never done learning. We’re looking for passionate people with undying curiosity. Those who want to attack one of the most challenging problems mankind has ever faced. Head on.