Job Description

The Medical Device Cybersecurity Analyst will be responsible for supporting Crothall’s overall cybersecurity initiatives including defined day to day managed services activities. Utilizing Crothall’s cybersecurity framework, technologies and policies and procedures, the Medical Device Cybersecurity Analyst will be involved in response to cybersecurity alerts, ensuring Client KPI’s are met, perform audits and risk assessments of medical devices, and provide subject matter expertise with Crothall resources for medical device cybersecurity.

JOB DUTIES AND RESPONSIBILITIES:

The essential functions of the job include but are not limited to the following:

Monitors and responds to Crothall’s comprehensive medical device asset and cybersecurity management platform findings and mitigating steps.
Strong knowledge of computers, operating systems, security, and networking
Ability to interpret technical documentation and manuals
Generate and build bi-weekly, monthly, and quarterly client reports
Correlate and perform GAP analysis on discovered medical devices with Crothall’s CMMS
Create security work orders in Crothall’s CMMS and assign to the field as applicable
Triage, respond and assign work orders generated from Crothall’s CMMS cybersecurity module as appropriate
Ensure work orders are completed within defined KPI’s and assist on site Crothall resources if needed for successful completion
Research and engage OEMs for available approved patches and firmware upgrades
Proactively collect most current MDS2 forms
Maintain database of approved patches, firmware upgrades and MDS2 forms
Collaborate and work with Clients to respond and coordinate mitigating steps and compensating controls on contracted medical devices that may arise from Clients passive asset discovery and risk assessment technology
Participate and contribute to Crothall’s CEIT Council
Maintains operational security metrics to measure the effectiveness of security controls and identify opportunities for improvement
Assist in threat intelligence gathering, monitoring of zero-day and correlate to clients CMMS inventory
Assist in development and implementation of continued best practices and risk management of inventoried connected medical devices
Assures compliance with all regulatory standards including patient safety and all relative criteria governing the safe and appropriate use, testing and management of medical devices.
Maintain an orderly and functional work environment.
Collaborate with fellow technical personnel in department meetings to ensure they are kept abreast of technical updates and/or device related problems.
Learn, understand, and comply with all government, regulatory, industry, company, and client Policies and Procedures, and subsequent updates.
Complete all required training (e.g., skills-based, client, work-related, certification).
Perform other duties as assigned that are intrinsic to the successful operation of the account and company.

QUALIFICATIONS:

Education:
Associates degree in Information Technology or Biomedical Engineering required.
Security+ within 3 years of employment
Preferred: BMET background

Experience:
Healthcare experience; General knowledge of Biomedical and Diagnostic Imaging.
Knowledge of healthcare cybersecurity is considered a plus.
Preferred: BMET background
Preferred: Experience with Computerized Maintenance Management Systems (CMMS)
Knowledge of connected medical device asset discovery and risk analysist platforms.

Job Type: Full-time

Pay: $70,000.00 - $85,000.00 per year

Benefits:

• 401(k)
• Dental insurance
• Health insurance
• Life insurance
• Paid time off
• Vision insurance

Schedule:

• Monday to Friday

Application Question(s):

• Do you possess knowledge of connected medical device asset discovery and risk analysist platforms
• Do you have general knowledge of Biomedical and Diagnostic Imaging?

Education:

• Associate (Required)

Work Location: In person

Similar Jobs