Specialist, Information Security

The Information Technology (IT) team plays a key role in providing business enablement throughout Res Med. We are focused on application, infrastructure, and user productivity solutions, with innovation, efficiency and security. Our goal is providing customer oriented agile delivery, effective business partnership and state-of-the-art technology solutions. Shape the future of secure innovation at global scale. As an Information Security Specialist, you will play a critical role in protecting Resmed’s information assets, technology platforms, and business operations.

Working within the Enterprise Security Group, you’ll lead security risk assessments across cloud environments, third-party solutions, and AI/ML-enabled products, helping teams make informed decisions while enabling innovation. Your expertise will guide secure design practices, strengthen risk management, and support compliance and audit readiness across a global organization. This is an opportunity to influence how security is embedded into technology initiatives, collaborate with stakeholders around the world, and make a meaningful impact on the systems and solutions that support Resmed’s mission.

• Lead security engagement across global projects, aligning security practices with business and technical objectives.
• Conduct end-to-end security risk assessments for cloud-native and hybrid environments, including architecture and control reviews.
• Evaluate third-party products and services during onboarding and integration to ensure security and compliance requirements are met.
• Lead security reviews of AI/ML-enabled products, focusing on secure design, guardrails, and risk mitigation.
• Partner with project managers, product owners, architects, and developers to integrate security throughout the software development lifecycle.
• Communicate security risks, recommendations, and mitigation plans in a clear, business-relevant manner.
• Produce and maintain risk assessments, security summaries, remediation recommendations, and related documentation.
• Track risks and controls using GRC tools to ensure accountability and traceability.
• Stay current on emerging technologies, security threats, and industry best practices.
• Contribute to the continuous improvement of security frameworks, processes, and standards across the organization.

• Proven ability to independently lead security risk assessments across a variety of technologies and environments.
• Experience with third-party security risk management processes and platforms.
• Strong understanding of:
  • Authentication and authorization
  • Encryption
  • Application and network security
  • Data Loss Prevention (DLP)
  • Endpoint protection
  • Cloud Security Posture Management (CSPM)
  • Cloud Access Security Broker (CASB)
  • Privileged Access Management (PAM)
  • Zero Trust Network Access (ZTNA)
  • Logging and monitoring
  • Vulnerability management
  • Incident response
• Nice to Have:
  • Bachelor's degree.
  • 5+ years of related information security experience.
  • Professional certifications such as CISSP, CISM, CCSP, CRISC, or AWS Security Specialty.
  • Familiarity with ISO 27001, SOC 2, GDPR, HIPAA, NIST AI RMF, and ISO/IEC 42001.
  • Knowledge of AWS cloud security controls.
  • Experience with in healthcare or manufacturing environments.

• Strategic Thinker:
  You balance security requirements with business objectives and help teams make informed decisions.
• Influential Communicator:
  You translate complex security concepts into practical guidance that resonates with technical and non-technical audiences.
• Collaborative Partner:
  You build strong relationships across functions, cultures, and time zones to drive successful outcomes.
• Proactive Problem Solver:
  You identify risks early, assess impacts thoughtfully, and develop practical…