Cyber Security Analyst - Medical Devices

Work Shift: Day (Monday-Friday, 7:30 AM – 4:00 PM)

Worker Sub-Type: Regular

About the Role

Serves as the lead for day-to-day operational specialist in the area of information security for healthcare technology management. Provides oversight of the medical device security framework for integration and supplemental support into Children’s Medical Equipment Management plan.

Responsibilities

• Supports the technical aspects of Clinical Engineering’s new equipment, software upgrades, patching, and password management; acts as liaison with IS&T resources on such projects.
• Provides technical and reporting guidance to team members regarding systems used for computerized maintenance management software.
• Partners with the IS&T security team on the collection and reporting of designated metrics, ensuring all identified medical devices are monitored for patching status, password management, and vulnerability management.
• Develops capabilities to monitor and detect indicators of compromise using security scripts, tools, and services.
• Ensures the integrity and protection of networks, systems, and applications by enforcing organizational security policies through monitoring of vulnerability scanning devices.
• Assists and leads in defining and implementing countermeasures or mitigating controls to monitor and detect indicators of compromise.
• Works closely with the Biomedical Network Analyst, Information Security Analyst, Security Architect, Network infrastructure team, and business units to implement security infrastructure and technical controls.
• Serves as an escalation point for complex and sensitive information security issues.
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance.
• Performs detailed analysis of business needs, identifies IT security impacts or considerations, and translates them into secure, viable technical solutions.
• Develops project charters and objectives; provides presentations regarding proposals, soliciting feedback, and promoting buy-in.
• Maintains current knowledge of relevant technology; provides system performance monitoring and troubleshooting.
• Prepares incident reports of analysis methodology and results.
• Works independently or as a lead on projects of medium to high complexity; establishes and maintains project plans, adjusting for potential impacts to meet deadlines.
• Evaluates new equipment (both hardware and disposables) and new technology from design, modification, and usage perspectives.
• As part of Vendor Quality Assurance, evaluates vendor competencies and examines product history related to hardware and software.
• Assists in developing and implementing consistent policies and procedures guiding information security goals and objectives.
• Advises and participates in “ad hoc” committees on medical equipment issues, as assigned.
• Assists with oversight of all healthcare technology hardware and software upgrades.
• Maintains or oversees the integrity of IS&T-related technical fields in the existing CMMS platform; updates the operational security status of equipment in the management platform; monitors and communicates compliance with specifications, codes, and hospital standards.

Requirements

• Three years of experience in any combination of support and monitoring of security endpoints/servers (e.g., patch deployment, risk assessment, vulnerability scanners, security incident and event monitoring solutions, antivirus products).
• Experience with network security protocols and methodologies, information security and technology controls, security penetration and vulnerability assessments, and systems/network administration.
• Solid knowledge of Health Insurance Portability and Accountability Act (HIPAA), Joint Commission, and other information technology security governing bodies.
• Strong knowledge of accepted information systems and technology security regulations.
• Demonstrated knowledge of generally known information technology platforms, standards, and software development languages.
• Well-developed organizational, written communication, and analytical skills.
• Ability to function in a dynamic environment subject to impromptu changes in schedules and priorities.

Preferred Qualifications

• Five years of experience in computer operations, information security, and/or risk management.
• Experience in a healthcare setting.
• Experience specifically with Medical Equipment security and management.

Education

Bachelor's degree in computer sciences, information technology, related field, or equivalent senior experience.

Certifications

No professional certifications required.