C2A Security adds medical device cybersecurity expert Jörn Lubadel to advisory board

C2A Security said Aug. 18, 2026, that Jörn Lubadel has joined its advisory board in an independent role, bringing more than 25 years of healthcare, regulatory and product security experience. The move is meant to strengthen the company’s push into medical devices and other highly regulated industries as manufacturers face tougher cybersecurity and compliance demands.

Why it matters: - Medical device makers are facing tighter cybersecurity, regulatory and post-market monitoring demands. - C2A Security is positioning its EVSec platform for that market, where product security and patient safety are increasingly linked. - Lubadel’s background gives C2A Security added credibility with regulated manufacturers and standards bodies.

What happened: - C2A Security announced that Jörn Lubadel joined its Advisory Board in an independent capacity. - Lubadel serves separately from his role as Global Head of Product Security at B. Braun. - The announcement was dated Aug. 18, 2026, from Jerusalem, Israel.

The details: - Lubadel brings more than 25 years of experience in healthcare technology, medical devices, product cybersecurity and regulatory environments. - He is a DIN-delegated expert to ISO/IEC in health software and medical device cybersecurity. - Lubadel is Vice Chair for cybersecurity working groups at APACMed and MedTech Europe. - He also contributes to AAMI, the Association for the Advancement of Medical Instrumentation. - Lubadel has spoken at industry events including DigiCert’s Trust Summit, Secure Medicine’s Archimedes program and the NTIA Healthcare SBOM initiative. - C2A Security said Lubadel will advise on product strategy, market requirements and cybersecurity and regulatory challenges facing medical device manufacturers. - His input is intended to support C2A Security’s product security orchestration across secure development, lifecycle risk management, regulatory evidence, post-market monitoring and software supply chain security. - The company said its EVSec platform provides continuous, AI-driven contextual risk management across the product lifecycle. - EVSec is built to embed security by design, automate compliance and threat analysis, manage vulnerabilities and bills of materials, and improve collaboration across engineering, product security, quality, regulatory and healthcare IT teams. - C2A Security said the platform gives manufacturers and suppliers one live view of security and compliance across the product lifecycle. - The company said that approach can shorten software release times and reduce compliance costs. - C2A Security says it serves heavily regulated industries including automotive, medical devices, industrial and robotics. - The company says regulations such as UN R155, FDA Section 524B and the EU Cyber Resilience Act are driving the need for continuous product-security proof. - C2A Security says it received a CLEPA Innovation Award for its DevSecOps platform. - The company lists Bayer, BMW Group, Daimler Truck AG, Ascensia, Elekta, NVIDIA, Siemens, HARMAN, Marelli, NTT Data and Deloitte as customers and technology partners. - C2A Security was founded in 2016 by NDS/Cisco veteran Michael Dick and is headquartered in Jerusalem, Israel. - The company’s social media page is available here.

Between the lines: - The advisory-board hire signals a push to deepen domain expertise as C2A Security expands beyond automotive into medical devices. - Lubadel’s mix of standards work, industry leadership and product-security practice suggests C2A Security wants more direct alignment with global regulatory expectations. - The company is framing cybersecurity as a lifecycle discipline, not a one-time compliance exercise.

What's next: - Lubadel is expected to help shape C2A Security’s product direction and market approach in medical devices and adjacent regulated sectors. - C2A Security will likely continue tying EVSec to emerging compliance regimes and evidence-gathering requirements. - The company’s broader growth strategy appears focused on manufacturers that need continuous security and compliance visibility rather than point-in-time assessments.