Role Description
As a Medical Device and IoMT Security Specialist, this role reports to the Manager of Endpoint Security. This role develops, engineers, and maintains the Medical Device/IoMT Security Program for the Cybersecurity Risk Management Department. This role is expected to have expert level knowledge of medical device and IoMT security technologies. The specialist will be responsible for:
-
Identifying and remediating security gaps
-
Continued improvement of existing controls
-
Mentoring and collaborating with other Cyber Security, Clinical Engineering, and Information Technology team members
-
Collaborating with architects to design and implement solutions that better protect CHS Medical Devices and data
Qualifications
-
Bachelorโs or Masterโs Degree in Cyber Security, Computer Science, Information Systems (or other related field), or equivalent work experience
-
5+ years of IT or information security experience
-
3+ years of Medical Device/IoMT security experience
-
Experience with design and delivery of Medical Device and IoMT security solution strategies based on knowledge of the industry
-
Experience in design and deployment of network security solutions and controls in industrial networks
-
Advanced knowledge of security principles, issues, techniques, and implementations across medical device and IoMT security platforms
-
Proactive identification and solving of complex problems
-
Strong understanding of medical device and IoMT system development
-
Strong ability to work on and prioritize multiple, concurrent projects while meeting aggressive deadlines
-
Willingness to participate in cross-functional training and support
-
Effective communication of technical concepts to a non-technical audience
-
Excellent written and verbal communication skills
Requirements
-
Design, engineer, manage, review, and recommend improvements for new and existing Medical Device and IoMT security solutions, configurations, and technologies
-
Develop and maintain security standards based on National Institute of Standards and Technology (NIST) recommendations, specifically NIST 800-53
-
Identify Medical Device and IoMT vulnerabilities and make recommendations for key Cyber Security stakeholders
-
Develop and improve policies, standards, and processes for threat remediation
-
Provide technical guidance to enterprise Cyber Security and Information Technology teams
-
Assist in developing and documenting an overall medical device and IoMT protection strategy
-
Other duties and responsibilities as assigned by cybersecurity leadership