Clinical Engineering Cyber Specialist

About The Client:
Client is a global leader in Healthcare Technology Management. This role supports reputed Hospital in Far Rockaway NY leading their medical device cybersecurity program.

Role Overview:
We are seeking a Clinical Engineering Cyber Specialist to lead and support the implementation of medical device cybersecurity strategies. You will own the technical execution of the healthcare cybersecurity program - from collecting critical cybersecurity data elements to vulnerability remediation risk assessments and collaboration with Hospital IT & InfoSec to secure and ensure availability of medical devices.

What Youll Do:

Technical Leadership - 80%

• Lead collection of Critical Cybersecurity Data Elements (CDEs) and manufacturer documentation in CMMS
• Conduct risk assessments based on CDEs and manufacturer recommendations
• Oversee out-of-the-box configuration of medical devices to cybersecurity standards
• Lead planned remediation (patching upgrades) and unplanned remediation (zero-day response)
• Coordinate all cybersecurity activities directly with device manufacturers
• Lead testing and validation of network segmentation rules with Hospital IT
• Support IT projects that impact medical devices on the network

Program Support - 10%

• Investigate cybersecurity alerts on medical devices
• Analyze high/critical vulnerabilities and develop response recommendations
• Track and report vulnerability remediation activities & KPIs
• Drive continuous improvement for HTM and IT cybersecurity practices
• Ensure quality control of cybersecurity data in CMMS

Training & Compliance - 10%

• Provide HTM cybersecurity education and coach BMETs on cyber hygiene
• Represent Sodexo in industry cybersecurity forums/workgroups
• Advise on hospital audits - HIPAA Joint Commission FDA

What You Bring:

• 3 years experience in Medical Device Cybersecurity or Healthcare Technology / HTM / Clinical Engineering
• Strong knowledge of CMMS platforms
• Strong knowledge of Cybersecurity Frameworks: NIST ISO 27001
• Knowledge of FDA Joint Commission HIPAA regulations
• Proven ability to lead technical projects and cross-functional alignment with IT/InfoSec
• Valid drivers license with acceptable driving record
• Bachelors Degree or equivalent experience

Preferred Certifications: CISSP HCISPP CEH Security CHTM CHTS

What client Offers:
Medical Dental Vision Wellness Programs 401(k) with Match Paid Time Off Holidays Career Growth & Tuition Reimbursement.

Screening Questions:

1. What CMMS have you used and have you collected CDEs
2. Experience with medical device patching / zero-day response
3. Exposure to NIST ISO FDA HIPAA audits
4. Have you worked directly with Hospital IT/InfoSec and device manufacturers
5. Onsite in Far Rockaway NY - are you local / willing to commute Valid DL