Medical Device Cybersecurity Analyst

Job Summary

The Medical Device Cybersecurity Analyst works under the direction of the Cybersecurity Director and supports overall cybersecurity initiatives including defined day-to-day managed services activities. The Medical Device Cybersecurity Analyst also responds to cybersecurity alerts, ensuring Client KPI’s are met, performs audits and risk assessments of medical devices, and provide subject matter expertise. This position is expected to have the ability to navigate real time cybersecurity tasks, and reports to their assigned account and is expected to occasionally travel regionally.
JOB DUTIES AND RESPONSIBILITIES:

•Monitors and responds to comprehensive medical device asset and cybersecurity management platform findings and mitigating steps
•Triage, respond and assign work orders generated from CMMS cybersecurity module
•Proactively collect most current MDS2 forms
•Maintain database of approved patches, firmware upgrades and MDS2 forms
•Maintains operational security metrics to measure the effectiveness of security controls and identify opportunities for improvement
•Assures compliance with all regulatory standards including patient safety and all relative criteria governing the safe and appropriate use, testing and management of medical devices
•Complete all required trainings
•Collaborate and work with Clients to respond and coordinate mitigating steps and compensating controls on contracted medical devices
•Assist in threat intelligence gathering, monitoring of zero-day and correlate to clients CMMS inventory
•Participates and contributes to CEIT Council, client meetings, and assigned committees
•Maintain positive relationships with coworkers, medical staff, vendors, manufacturers, and the general public
•Generate and build bi-weekly, monthly, and quarterly client reports
•Correlate and perform GAP analysis on discovered medical devices with CMMS
•Create security work orders in CMMS and assign to the field as applicable
•Ensure work orders are completed within defined KPI’s
•Research and engage OEMs for available approved patches and firmware upgrades
•Assist in development and implementation of continued best practices and risk management of inventoried connected medical devices
•Perform other duties as assigned that are intrinsic to the successful operation of the business

QUALIFICATIONS:
Education:
• Associate’s Degree in IT or Biomedical Engineering or equivalent
• Knowledge of healthcare with Computerized Maintenance Management Systems (CMMS)
• Security+ preferred, required within three years of employment
Experience:
• Minimum of two years in patient care environment
• Minimum of two years of cybersecurity experience