About the Role
Lead the technical execution of a medical device cybersecurity program within a hospital environment, overseeing the implementation of cybersecurity controls, performing risk assessments, and collaborating with various teams to ensure the security, integrity, and availability of medical devices.
Responsibilities
- Lead collection of Critical Cybersecurity Data Elements (CDEs) within the CMMS platform.
- Collect manufacturer documentation and cybersecurity recommendations.
- Perform risk assessments based on collected CDEs and manufacturer guidance.
- Oversee medical device configuration to align with cybersecurity standards and manufacturer recommendations.
- Lead planned vulnerability remediation including patching and upgrades.
- Lead response to unplanned vulnerabilities including zero-day threats.
- Coordinate cybersecurity activities with medical device manufacturers.
- Support testing and validation of network segmentation rules with hospital IT.
- Investigate cybersecurity alerts affecting medical devices.
- Analyze high and critical vulnerabilities and develop technical response recommendations.
- Track and report vulnerability remediation activities.
- Identify opportunities to improve cybersecurity practices across HTM and IT teams.
- Support cybersecurity education and awareness for HTM teams.
- Coach BMETs on cybersecurity best practices.
- Participate in cybersecurity workgroups and technical forums.
- Support HIPAA, Joint Commission, and enterprise cybersecurity audits.
Requirements
- Minimum 3 years of experience in medical device cybersecurity or a healthcare technology environment.
- Bachelor’s degree or equivalent experience.
- Strong knowledge of CMMS platforms.
- Strong knowledge of cybersecurity frameworks such as NIST or ISO.
- Knowledge of FDA and Joint Commission regulatory requirements.
- Experience leading cybersecurity initiatives, vulnerability remediation, and risk assessments.
- Experience collaborating with Hospital IT, Information Security teams, HTM teams, and medical device manufacturers.
- Valid driver's license with acceptable driving record.
- Ability to work onsite in Far Rockaway, New York.
Skills
- Medical device cybersecurity
- Healthcare technology
- CMMS platforms
- Cybersecurity frameworks (NIST, ISO)
- FDA regulatory requirements
- Joint Commission regulatory requirements
- Cybersecurity initiatives
- Vulnerability remediation
- Risk assessments
- Collaboration with Hospital IT
- Collaboration with Information Security teams
- Collaboration with HTM teams
- Collaboration with medical device manufacturers
- CISSP Certification
- HCISPP Certification
- CEH Certification
- Security+ Certification
Location
- Far Rockaway, New York
Work Type
- Full Time
- Onsite
Experience Level
- Minimum 3 years of experience
Education Level
- Bachelor’s degree or equivalent experience
Benefits
- Medical, Dental & Vision Insurance
- Wellness Programs
- 401(k) with Company Match
- Paid Time Off
- Company Holidays
- Career Growth Opportunities
- Tuition Reimbursement
About the Company
- Heartline Staffing is recruiting for a Clinical Engineering Cyber Specialist opportunity in Far Rockaway, New York.
