Full Job Description
BMET Cybersecurity Specialist
Leads the technical activities associated with the delivery of a medical device cybersecurity program, such as collection of cybersecurity data elements in the asset inventory, implementation of cybersecurity controls, and execution of critical cybersecurity fixes. Leads the technical analysis of emerging cybersecurity threats to determine impact to any devices in the asset inventory. Advises on technical elements of cybersecurity strategy, including recommendations for improvement. Supports the collection of metrics and key performance indicators for leadership review.
The role of an individual contributor within the organization focuses on completing specific tasks and projects; contributing directly through their skills and expertise. Performs specialized technical tasks to support operations. Work is primarily achieved independently, however may collaborate with a team.
Pay Range: $74290 - $96140
Support the identification, inventory, classification, and tracking of connected medical devices and their relevant cybersecurity attributes, including operating systems, software versions, network connectivity, and manufacturer support status.
Assist with investigating potential medical device cybersecurity incidents, gathering technical information, documenting findings, and coordinating response activities with appropriate teams.
• Lead the collection of Critical Data Elements (CDEs) in CMMS
• Supports a range of IT projects that have implications for medical devices on the network
• Lead the coordination of cybersecurity activities with device manufacturers as needed
• Oversee the investigation of alerts on medical devices in the hospital and clinics
• Lead collection of manufacturer documentation and cybersecurity recommendations
• Support HTM cybersecurity education & awareness for HTM teams
• Coach BMETs on basic cybersecurity hygiene and out of the box controls
A strong computer and IT background, including an understanding of operating systems, computer hardware, networking fundamentals, software, and troubleshooting.
An interest in medical device cybersecurity and the ability to learn how connected clinical equipment interacts with hospital networks and healthcare systems.
• Medical Device Knowledge - very deep knowledge of the design of medical devices including protocols for device maintenance, understanding of common challenges and limitations with medical devices, thorough knowledge of medical device functions and how they are used for patient care
• Software and Server Management - knowledge and experience with hands-on management of highly technical and sensitive hardware and software used to support the delivery of patient care, includes the daily management of key components to ensure high uptime and availability, some experience with the triage and troubleshooting of highly technical scenarios, some ability to oversee the response to both planned and unplanned downtime of key components
• Strong Awareness of Hospital Processes - clear understanding of how hospital departments operate including common roles and processes, awareness of critical safety protocols when in clinical areas, demonstrates appropriate behavior and awareness of surroundings in clinical areas
• Drive for Results - ability to coordinate access & interactions with medical devices under complex and tense situations, resilience to changes or barriers in access to medical devices, ability to negotiate and compromise with others to achieve goals
• Demonstrated Specialization in Cybersecurity - clear passion for cybersecurity for medical devices, demonstrated experience with hands-on cybersecurity activities in healthcare or comparable industry, evidence of structured learning and/or self-learning on cybersecurity topics, currently has or is pursuing certification in cybersecurity
Requirements
• Education Requirement: Bachelor's degree or equivalent experience
• Related Experience: 3 years
What we offer
Compensation is fair and equitable, partially determined by a candidate's education level or years of relevant experience. Salary offers are based on a candidate's specific criteria, like experience, skills, education, and training. Sodexo offers a comprehensive benefits package that may include:
• Medical, Dental, Vision Care and Wellness Programs
• 401(k) Plan with Matching Contributions
• Paid Time Off and Company Holidays
• Career Growth Opportunities and Tuition Reimbursement
More extensive information is provided to new employees upon hire.