Medical Device and IoMT Security Specialist (Level 4)

Job Summary

As a Medical Device and IoMT Security Specialist, this role reports to the Manager of Endpoint Security. This role develops, engineers, and maintains the Medical Device/IoMT Security Program for the Cybersecurity Risk Management Department. This role is expected to have expert level knowledge of medical device and IoMT security technologies. The specialist will be responsible for identifying and remediating security gaps, the continued improvement of existing controls, mentoring and collaborating with other Cyber Security, Clinical Engineering, and Information Technology team members to secure the many information technology assets and data of Community Health Systems. The specialist will collaborate with architects to design and implement solutions that better protect CHS Medical Devices and data.

Essential Functions

• Design, engineer, manage, review, and recommend improvements for new and existing Medical Device, and IoMT security solutions, configurations and technologies. Develop and maintain security standards based on National Institute of Standards and Technology (NIST) recommendations, specifically NIST 800-53.
• Identify Medical Device and IoMT vulnerabilities and make recommendations for key Cyber Security stakeholders
• Develop and improve policies, standards, and processes for the identification and prioritization of threat remediation as well as processes and methodologies for metrics and KPIs related to medical device/IoMT protections, security and compliance.
• Provide technical guidance to enterprise Cyber Security and Information Technology teams regarding the impact of medical device security controls in order to drive issues to remediation and develop systemically secure configurations.
• Assist in developing and documenting an overall medical device and IoMT protection strategy including defining control standards, asset management standards, and enhancement opportunities.
• Other duties and responsibilities as assigned by cybersecurity leadership.

Qualifications

• Bachelor’s or Master’s Degree in Cyber Security, Computer Science, Information Systems (or other related field), or equivalent work experience.
• 5+ years of IT or information security, and
• 3+ years of Medical Device/IoMT security
• Experience with design and delivery of Medical Device and IoMT security solution strategies based on knowledge of the industry, as well asn Medical device IoMT leading security practices.
• Experience in design and deployment of network security solutions and controls in industrial networks, including network zoning, segmentation and isolation designs and implementation.
• Advanced knowledge of security principles, issues, techniques and implementations across medical device and IoMT security platforms.
• Proactive identification and solving of complex problems
• Strong understanding of medical device and IOMT system development to provide technical leadership for multifunctional projects and initiatives.
• Strong ability to work on and prioritize multiple, concurrent projects while meeting aggressive deadlines in a fast-paced environment.
• Willingness to participate in cross-functional training and support
• Effective communication of technical concepts to a non-technical audience.
• Excellent written and verbal communication skill