John Chenoweth

About John Chenoweth

Global Product and Security Leader that drives action in product development and IT security to improve products, performance, and organizational awareness by partnering to get to done! Innovative with a proven record of improving product, infrastructure, cloud, medical device security, and application security by implementing process, frameworks, and technologies into complex global organizations. Process-driven and adept at coordinating cross-functional teams for software development, engineering, IT operations, and security.Areas of Expertise:CISSP - Certified Information System Security ProfessionalSecurity Engineering & OperationsApplication Development Application Security (AppSec)Product SecurityInformation Technology (IT)Digital TransformationIdentity & Access ManagementStrategic PlanningSoftware Deployment LifecycleCloud-Based Services

Experience

1. Chief Product Security Officer

   Elekta

   Jun 2023 — Present

   Built and led a global product and application security team to address software, data, and devices meeting global medical device cyber security regulations.• Address global application and product security for software and hardware throughout the requirements, development, testing, quality, and DevOps CI/CD process globally. • Coached team members on security practices and medical device security.• Wrote global procedure and templates to implement medical device security to meet global regulations and protect customers.• Deployed industry leading tools and technology with embedded AI to improve results and efficiency of the Application and Product Security role.• Defined tools, processes and design for engineering, development, and product management to improve medical devise and software application security of platforms and medical device software.• Developed security processes including scanning, penetration testing, architecture, and secure code analysis integrating with the software development agile process to meet HIPAA, SOC2, ISO27001, FedRamp, and Cyber Security for medical device compliance. • Build a security operations team to secure and monitor global SaaS Cloud offering in over 70 countries to protect PHI and respond to security incidents.• Partnered with the legal, compliance and IT security teams to ensure compliance with regulatory cybersecurity guidance from the FDA, MDCG, NMPA, and other global regulatory authorities. • Analyze and assessed vulnerabilities and software in medical devices and related services. • Investigate and implement security controls to remedy the detected vulnerabilities.

Education

• Rollins College

  Master of Planning, Civic Urbanism

• The University of Dallas

  Master of Business Administration - MBA

• Texas A&M University

  Bachelor of Science - BS, Engineering

  1989

Skills

• Information Security
• Deployment
• Product Strategy
• Process Improvement
• Cross Functional Team Building
• Information Technology
• IT Management
• Marketing Management
• Market Analysis
• Excel
• IT Operations Management
• Strategy Development
• IT Strategy
• Information Security Management
• Sales Operations
• Professional Services
• Pricing Strategy
• Leadership
• Strategic Planning
• Network Security
• Team Building
• Management
• Vendor Management
• IT Audit
• Channel
• Pki
• IT Service Management
• Identity Management
• Product Life Cycle Management
• Security
• Enterprise Software
• Product Marketing
• IT Project & Program Management
• Disaster Recovery
• Go-to-Market Strategy
• Product Launch
• Saml
• Program Management
• System Architecture
• IT Operations