Principal Security & Privacy Engineer (Medical Devices)

Location: Fridley, Minnesota, United States; office role with regular computer-based and in-person collaboration.

Salary: $160,800–$241,200 per year in U.S. locations, excluding Puerto Rico and specific California locations.

Company

hirify.global develops healthcare technologies and medical devices used to alleviate pain, restore health, and extend life.

What you will do

• Own and continuously improve the Privacy by Design framework across connected medical devices and supporting systems.
• Lead cross-functional privacy activities, identify risks, and define technical and procedural controls for products, systems, and third-party integrations.
• Conduct Data Protection Impact Assessments, develop mitigation plans, and maintain data maps, policies, compliance evidence, and regulatory submissions.
• Lead privacy investigations, corrective actions, remediation activities, and privacy incident response.
• Align privacy requirements with product security engineering, threat assessments, security risk management, and product assurance.
• Advise engineering, legal, regulatory, and business stakeholders while mentoring privacy and security professionals.

Requirements

• Bachelor’s degree with 7 years of relevant experience, Master’s degree with 5 years, or PhD with 3 years.
• Extensive experience applying Privacy by Design principles throughout product development lifecycles.
• Understanding of data protection, risk management, cybersecurity principles, and incident response methodologies.
• Knowledge of global privacy laws, including HIPAA and GDPR.
• Experience in healthcare or another heavily regulated industry is preferred.
• U.S. work authorization sponsorship is offered for Principal-level roles and above; the role is based in the United States.

Nice to have

• Privacy and security incident management experience.
• CIPP, CHPC, or a similar certification.
• Knowledge of medical device regulations and standards, including FDA cybersecurity guidance, ISO 13485, and ISO 81001-5-1.

Culture & Benefits

• Mission-driven work focused on improving patient health through medical technology.
• Health, dental, and vision insurance, plus health and dependent-care spending accounts.
• 401(k) plan with employer contribution and match, paid time off, and paid holidays.
• Life insurance, disability coverage, tuition assistance, employee stock purchase plan, and well-being programs.
• Eligibility for the hirify.global Incentive Plan and other incentive programs.