AndrewChukwu

As we age longer, the technology supporting our health has to advance, and that technology increasingly holds some of the most sensitive information a person has. That combination, devices that support or save lives while handling protected health data, is what drew me to MedTech and keeps me there. I work within ZEISS Group's medical technology division, where I use strong communication, stakeholder management, and negotiation skills to advise and consult product and engineering teams on embedding security throughout the total product lifecycle, and on preparing for FDA premarket and postmarket cybersecurity submissions and surveillance.

Regulatory expectations for MedTech and healthcare technology are tightening fast, from FDA's premarket and postmarket cybersecurity guidance to EU MDR technical documentation and emerging AI regulation. At the same time, attacks on the sector have risen sharply, increasingly shaped by AI-enabled attack patterns that move faster than traditional defenses can keep up with. During my free time, I write Regulated Cyber, a free publication that gives product security, privacy, and regulatory teams clear intelligence on what's changing and what to do about it, so they're not caught off guard by the next requirement or the next threat. Writing it also keeps me sharp. Staying close to evolving guidance and emerging attack patterns is part of how I stay current as a MedTech cybersecurity professional myself.

I worked within a global team of security experts, engineers, product security, legal, and privacy professionals, consulting across a truly international organization spanning multiple regions and business functions.

At EY, one of the Big Four professional services firms, I advised clients on cyber risk, compliance, and security governance across regulated industries, gaining exposure to consulting at scale and to the security expectations large, complex organizations operate under.