Clinical Engineering Cyber Specialist

Job Description

Job Description

About The Client:
Client is a global leader in Healthcare Technology Management. This role supports reputed Hospital in Far Rockaway, NY, leading their medical device cybersecurity program.

Role Overview:
We are seeking a Clinical Engineering Cyber Specialist to lead and support the implementation of medical device cybersecurity strategies. You will own the technical execution of the healthcare cybersecurity program - from collecting critical cybersecurity data elements to vulnerability remediation, risk assessments, and collaboration with Hospital IT & InfoSec to secure and ensure availability of medical devices.

What You'll Do:

Technical Leadership - 80%

• Lead collection of Critical Cybersecurity Data Elements (CDEs) and manufacturer documentation in CMMS
• Conduct risk assessments based on CDEs and manufacturer recommendations
• Oversee out-of-the-box configuration of medical devices to cybersecurity standards
• Lead planned remediation (patching, upgrades) and unplanned remediation (zero-day response)
• Coordinate all cybersecurity activities directly with device manufacturers
• Lead testing and validation of network segmentation rules with Hospital IT
• Support IT projects that impact medical devices on the network

Program Support - 10%

• Investigate cybersecurity alerts on medical devices
• Analyze high/critical vulnerabilities and develop response recommendations
• Track and report vulnerability remediation activities & KPIs
• Drive continuous improvement for HTM and IT cybersecurity practices
• Ensure quality control of cybersecurity data in CMMS

Training & Compliance - 10%

• Provide HTM cybersecurity education and coach BMETs on cyber hygiene
• Represent Sodexo in industry cybersecurity forums/workgroups
• Advise on hospital audits - HIPAA, Joint Commission, FDA

What You Bring:

• 3+ years experience in Medical Device Cybersecurity or Healthcare Technology / HTM / Clinical Engineering
• Strong knowledge of CMMS platforms
• Strong knowledge of Cybersecurity Frameworks: NIST, ISO 27001
• Knowledge of FDA, Joint Commission, HIPAA regulations
• Proven ability to lead technical projects and cross-functional alignment with IT/InfoSec
• Valid driver's license with acceptable driving record
• Bachelor's Degree or equivalent experience

Preferred Certifications: CISSP, HCISPP, CEH, Security+, CHTM, CHTS

What client Offers:
Medical, Dental, Vision, Wellness Programs, 401(k) with Match, Paid Time Off + Holidays, Career Growth & Tuition Reimbursement.

Screening Questions:

1. What CMMS have you used and have you collected CDEs?
2. Experience with medical device patching / zero-day response?
3. Exposure to NIST, ISO, FDA, HIPAA audits?
4. Have you worked directly with Hospital IT/InfoSec and device manufacturers?
5. Onsite in Far Rockaway, NY - are you local / willing to commute? Valid DL?