Clinical Cyber Security Engineer

Summary

As a hybrid biomedical equipment/IT technician, a Clinical Cyber Security Engineer usually has a four-year degree or the associated experience to maintain a diverse population of patient care equipment and networked medical devices. A Clinical Cyber Security Engineer has a good knowledge of electronics, schematics, computer operating systems, networking, and security. This individual must have strong project management skills and organizational skills.

Often, they must collaborate with the Manager of Clinical Cyber Security Engineering and the facility’s IT department and must demonstrate excellent customer service skills.

• Responsible for support and oversight of the clinical information systems under his/her care. This includes the tracking of hardware (configuration items), software and network documentation.
• Provides user support, systems technical service and support, and participates in system projects as requested.
• Coordinates and/or implements software patches / updates in collaboration with Clinical Staff, Original Equipment Manufactures and the Hospitals SIT Department.
• Demonstrates cost containment and financial acumen
• Maintains a good personal relationship with fellow co-workers, hospital staff, and vendors
• Maintains an accurate inventory of Networked Medical Devices or devices containing ePHl
• Works with IT and security staff to identify and mitigate risks; helps to enforce policies and procedures on medical devices and IoT systems
• Utilizes system management tools and industry best practices to asses security vulnerabilities and risk to medical devices and IoT management
• Uses project management tools to manage system implementations and change management procedures
• Acts as a consultant to the facility regarding system hardware/software evaluation and selection
• Coordinates installation and maintenance of networked medical devices containing
  
  PC hardware with facility IT department
• Performs other duties as assigned**

• Possesses a comprehensive knowledge of electromechanical devices and principles, as well as a thorough understanding of general patient care equipment and can demonstrate the usage of supported devices
• Basic understanding of life-support and diagnostic support devices and their usage within the healthcare setting
• Configuration of computer hardware and software, cyber security systems
• Use and management of operating systems including Microsoft, Linux/Unix and RTOS
• Configuration and deployment of computer software support tools (i.e. Configuration,
• Remote Management, Antivirus, Backup and Recovery, Monitoring tools, etc.)
• Proficient in the use of Microsoft Office products, and the creation of network diagrams using Microsoft Visio or similar software
• Configuration of basic network components and understanding of routing and subnetting processes
• Application of CIS, NIST, HITRUST best practices and guidelines to technology devices & systems
• Knowledge and understanding of human anatomy and physiology
• Accountability — takes ownership of assigned work and responsibilities, follows through and closes the loop
• Communication — clearly expresses thoughts and ideas both in written and verbal communications, provides timely information
• Financial Acumen — Considers financial impact of all decisions
• Integrity — Can admit mistakes, is direct and truthful
• Customer Service — demonstrates a "customer-first" mentality, focused on meeting the needs of customers and captures feedback to make improvements Priority Setting — Prioritizes assigned schedules and workload
• Knowledge - Stay current with technological developments, security trends and best practices in the information technology field.
• Information Technology — Possesses knowledge and understanding of basic cyber security and IT terminology as it pertains to medical devices and facility IT systems
• Team Building — Mentors newer technicians, facilitates clear communication amongst the team, demonstrates care and respect for co-workers and colleagues
• Regulatory — understands the various regulations and best practices that apply to the HTM space (HIPAA, HITECH, Omnibus, SOC, COBIT, ITIL)

• Culture —…