Expert Cyber Security
IT
Mission.
What will you do?
We believe that we grow as our people grow. Motivated professionals make a difference. Not just for themselves, but also for our customers. We are looking for people who share our corporate values among our local and international networks and promote close relationships with our customers and internal teams. Taleo’s success depends on the talent of its employees, therefore we are looking for an enthusiastic Expert Cyber Security:
The client a world leader in proton therapy solutions, is looking for a Cybersecurity
Consultant to support the compliance of its medical device product P235 with the upcoming
FDA Guidance on Cybersecurity (2025).
The consultant will lead the definition and implementation of a comprehensive Cybersecurity
Management Plan, perform threat modeling, update the Software Bill of Materials (SBOM), and ensure that cybersecurity documentation and user guides meet FDA eSTAR requirements.
This role requires strong expertise in cybersecurity applied to medical or industrial systems, a solid understanding of ISO 27001 / 27002, ISO 14971, and FDA eSTAR, as well as the ability to collaborate closely with IBA’s R&D, Digital Services, Quality, and Operations teams.
How do we imagine our future Expert Cyber Security ?
- Develop and consolidate the Cybersecurity Management Plan, leveraging existing processes such as incident response, vulnerability & patch management, non conformity management, and post-market surveillance.
- Define and document key cybersecurity policies and work instructions:
- Cryptography policy
- Code of conduct for local & remote users – Secure software development work instructions
- Cybersecurity metrics for the P235 product and the processes to monitor them
- Define and apply a Cybersecurity Threat Model to the P235 product, based on existing documentation (Cybersecurity Risk Analysis, ISO 27002 Applicability Analysis, Compliance Reports).
- Create or update architectural cybersecurity views using Enterprise Architect or other modeling tools.
- Update the Software Bill of Materials (SBOM) for all software systems included in the P235 product and format the SOUP list into a machine-readable format.
- Review and update the Cybersecurity & Data Protection Guide and the IT Network Connection Guide for compliance with FDA eSTAR 12.13.
- Update the Cybersecurity Report (MID117971) based on outcomes from SoW 1–4 to ensure full alignment with FDA cybersecurity requirements.
- Collaborate effectively with IBA stakeholders from Digital Services, R&D, QA, and Operations.
- Participate in on-site working sessions at Louvain-la-Neuve or, occasionally, other IBA locations in Belgium or abroad.
Required profile.
REQUIRED SKILLS & QUALIFICATIONS
- Master’s degree in Computer Science, Cybersecurity, or equivalent.
- Minimum 5-7 years of experience in cybersecurity in an industrial or medical device environment.
- Proven knowledge of FDA eSTAR, ISO 27001 / 27002, ISO 14971 (Risk Management).
- Experience in defining and implementing cybersecurity policies and procedures.
- Strong understanding of secure software development lifecycle (SSDLC) practices.
- Experience using documentation and development tools such as Enterprise Architect, Polarion, Metadoc, GitLab.
- Excellent analytical, documentation, and communication skills.
- Fluent in English (written and spoken); French is a strong asset.
HIGHLY APPRECIATED
- Experience in the medical devices or healthcare technology sector.
- Professional certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent.
- Experience with threat modeling methodologies (e.g., STRIDE, DREAD).
- Familiarity with FDA cybersecurity guidance, regulatory documentation, and audit preparation.
- Structured, detail-oriented, and capable of working autonomously within cross functional teams.
SOFT SKILLS
- Rigorous and methodical working approach
- Strong analytical and problem-solving mindset
- Excellent communication and collaboration abilities
- Autonomy, proactivity, and ownership of deliverables
- Result-oriented and able to meet deadlines under pressure