Submission for the position: Manager IS Security - Healthcare - (Job Number: 24013826)

POSITION SUMMARY

The Healthcare Technology Management Cyber Security Manager owns the medical device risk assessment & risk mitigation, business continuity planning, and software patching. These operations entail responding to and supporting with technical expertise, medical device network changes, connected device inventory management, identifying fault conditions and remediating if possible, and coordinating with IS Security team to resolve issues. The position will ensure medical equipment systems are fully inventoried, interfaced and/or integrated with various information systems in a consistent dependable manner, as set by BSW IS Security and manufacturers requirements. In partnership with all functional groups interfaced with medical equipment, develop a business continuity plan, maintain remaining current with system changes, and test the business continuity plans ensuring medical equipment continue their purpose of use under network interruptions.

DUTIES AND RESPONSIBILITIES

• Responsible for integrated medical device business continuity plans.
• Supports, monitors and manages the Connected Medical Device Inventory.
• Provides professional expertise, guidance and assistance in the area on Internet of Medical Things, Clinical Engineering-IT (CE CYBER) Systems, and Connected Device Inventory.
• Monitors clinical equipment that utilizes networking technologies.
• Works with vendors on hardware and software patch implementation for medical equipment per BSWH operating policies and procedures.
• Works with BSW IS Security, medical device and software manufactures/vendors to regression test solutions prior to being put into the production environment.
• Monitors and evaluates proposed software revisions to medical equipment systems and actively track and ensure that systems being upgraded
• Supports projects and programs in the assigned area, which includes but not limited to: inventory, planning, and management of LAN/WAN-based and integrated medical equipment network devices
• Ensures connected medical devices inventory has key information loaded into the CMMS platform: including, but not limited to, IP addresses, MAC addresses, AE titles, OS information, firmware versions, application versions, security attributes, equipment criticality and recovery information
• Provides timely advice to Healthcare Technology Management and IS management regarding procedure changes required to maintain system and equipment stability
• Provides input into policies, processes and procedures related to clinical equipment networking and medical devices.
• In-depth knowledge of medical device regulations and standards, including ISO 14971, ISO 13485, and FDA 21 CFR Part 820.
• Understanding of systems engineering and medical device connectivity, interoperability, and cybersecurity.
• Strong analytical and problem-solving skills.
• Strong written and verbal communication, judgment, decision-making, and critical thinking skills.
• Interaction with various stakeholders including SW development, verification, QA/ RA teams

EDUCATION

• Bachelor's degree Clinical Engineering, Biomedical Engineering or Information Systems or equivalent required
• 5 years healthcare experience; General knowledge of Biomedical Equipment and Diagnostic Imaging
• Experience with cybersecurity in the healthcare environment
• Knowledge of connected medical device asset discovery and risk analysist platforms
• Security+ required
• HCISPP, CISSP preferred
• Professional qualifications are preferred such as: CISSP, CISM, CSSLP, or OSCP

LICENSE/CERTIFICATIONS

• ISC2's CC and CISSP in addition to ISACA's CSX and CISM certifications are highly desired, as are AAMI's CABT, CBET, and CRES certifications (or other comparable credentials).

BENEFITS

Our competitive benefits package includes the following

• Immediate eligibility for health and welfare benefits
• 401(k) savings plan with dollar-for-dollar match up to 5%
• Tuition Reimbursement
• PTO accrual beginning Day 1

Note: Benefits may vary based upon position type and/or level

QUALIFICATIONS

• EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification
• EXPERIENCE - 5 Years of Experience