BMET Cybersecurity Specialist

BMET Cybersecurity Specialist role in Greensboro, NC supporting healthcare technology cybersecurity across the Cone Health system.

Responsibilities

• Lead technical activities for a medical device cybersecurity program, including:
  • Collecting cybersecurity data elements for the asset inventory
  • Implementing cybersecurity controls
  • Executing critical cybersecurity fixes
• Perform technical analysis of emerging cybersecurity threats and determine device impact across the asset inventory
• Advise on technical elements of cybersecurity strategy, including recommendations for improvement
• Support collection of metrics and key performance indicators for leadership review
• Identify, inventory, classify, and track connected medical devices and cybersecurity attributes, including:
  • Operating systems
  • Software versions
  • Network connectivity
  • Manufacturer support status
• Investigate potential medical device cybersecurity incidents by gathering technical information, documenting findings, and coordinating response activities with the appropriate teams
• Lead collection of Critical Data Elements (CDEs) in CMMS
• Support IT projects that impact medical devices on the network
• Coordinate cybersecurity activities with device manufacturers as needed
• Oversee investigation of alerts on medical devices in the hospital and clinics
• Collect manufacturer documentation and cybersecurity recommendations
• Support HTM cybersecurity education & awareness for HTM teams
• Coach BMETs on basic cybersecurity hygiene and “out of the box” controls

Requirements

• Strong computer and IT background, including understanding of:
  • Operating systems
  • Computer hardware
  • Networking fundamentals
  • Software
  • Troubleshooting
• Interest in medical device cybersecurity and ability to learn how connected clinical equipment interacts with hospital networks and healthcare systems
• Very deep knowledge of medical device design, including:
  • Protocols for device maintenance
  • Common challenges and limitations with medical devices
  • Medical device functions and how they are used for patient care
• Knowledge and hands-on experience managing highly technical and sensitive hardware and software supporting patient care, including:
  • Daily management of key components to ensure high uptime and availability
  • Some experience triaging and troubleshooting highly technical scenarios
  • Some ability to oversee response to planned and unplanned downtime of key components
• Clear understanding of hospital department operations, including awareness of critical safety protocols in clinical areas and appropriate behavior in clinical environments
• Ability to coordinate access and interactions with medical devices under complex and tense situations, with resilience to changes or access barriers, including the ability to negotiate and compromise to achieve goals
• Passion for cybersecurity for medical devices, with:
  • Hands-on cybersecurity experience in healthcare or a comparable industry
  • Evidence of structured learning or self-learning in cybersecurity topics
  • Currently has or is pursuing a cybersecurity certification
• Education: Bachelor’s degree or equivalent experience
• Related experience: 3 years

Location

• Greensboro, NC (onsite)

Salary

• $74,290 - $96,140 per year

Technology

• CMMS

Benefits

• Medical, Dental, Vision Care and Wellness Programs
• 401(k) Plan with Matching Contributions
• Paid Time Off and Company Holidays
• Career Growth Opportunities and Tuition Reimbursement

What We Offer

• Compensation is fair and equitable, partially determined by a candidate’s education level or years of relevant experience
• Salary offers are based on experience, skills, education, and training
• A comprehensive benefits package is provided, with more extensive information to new employees upon hire