Senior / Engineer, Biomedical Engineering (2 Years Contract)

National Healthcare Group Pte Ltd; Singapore; On-site; SGD 60,000 - 90,000; Full time

Job summary

A leading healthcare organization is seeking a Senior Engineer in Biomedical Engineering for a 2-year contract. The role involves managing cybersecurity risks associated with medical equipment, collaborating with IT teams, and ensuring compliance with policy guidelines. Candidates should have a degree in IT or related fields and relevant experience in cybersecurity assessment. This position offers the opportunity to work on critical healthcare technology and enhance safety protocols.

Qualifications

• 3 years experience for Engineer, 5 years for Senior Engineer.
• Preferable certifications include OSCP, CREST, CEH, CISSP.
• Familiar with cybersecurity standards like MDOTS and HIM-ISP.

Responsibilities

• Monitor system health and manage cybersecurity risks for medical equipment.
• Collaborate with IT for incident management and compliance.
• Document and assess cybersecurity risks related to medical equipment.

Skills

Cybersecurity assessment

Interpersonal skills

Effective communication

Analytical skills

Team collaboration

Education

Degree in Computer Science

Degree in Information Technology

Degree in related cybersecurity field

Tools

Fortify

AppScan

Nessus

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert: Create Alert

Senior / Engineer, Biomedical Engineering (2 Years Contract)

Family Group: Ancillary

Broad Function

As part of the BME cybersecurity team, you will prevent and manage cybersecurity risks associated with medical equipment and servers. Responsibilities include monitoring system health, implementing patches, and enhancing safety. Collaborate with the IT team to establish escalation processes for cyber incidents, develop contingency plans, and implement recovery procedures. Focus on policy implementation and control measures to ensure compliance and mitigate risks.

Key Responsibilities and Duties

Specific

1. Assess and address cybersecurity risks related to non-compliance with policy requirements during the acquisition of medical equipment, including new and loaned equipment.
2. Report and present any non-compliance issues to seek MOH endorsement.
3. Document cybersecurity risk assessment reports and review risks whenever there are changes to medical equipment configuration or requirements.
4. Update the Risk Registration for medical equipment and ensure mitigation controls for all IT-related risks are implemented.
5. Ensure medical equipment software is up to date upon delivery and plan for patches and updates throughout its lifespan.
6. Participate in IT-related projects involving medical equipment.
7. Collaborate with the IT team and vendors on server planning and software installation for medical equipment.
8. Continuously monitor the health status and vulnerabilities of medical equipment and servers.
9. Work closely with end users during cyber incidents, ensuring mitigation controls are implemented before equipment is returned to service.

General

1. Collaborate with the IT team to support onboarding activities for new equipment and related projects.
2. Provide BME/IT support to ensure medical equipment complies with MDOTS policy guidelines throughout its lifecycle.
3. Perform other tasks as directed by the Head of BME.

Job Requirements

Education / Training / Experience

1. Degree in Computer Science, Information Technology, or related cybersecurity field with at least 3 years of healthcare or cybersecurity assessment experience for Engineer.
2. Degree in Computer Science, Information Technology, or related cybersecurity field with at least 5 years of healthcare or cybersecurity assessment experience for Senior Engineer.
3. Experience with security tools such as Fortify, AppScan, Nessus, etc.

Professional License (if any)

Preferable certifications include OSCP, CREST, CEH, CISSP, AWS, CISA, CISM, or any cloud security specialty.

Attributes

1. Strong interpersonal skills, effective communication with stakeholders from diverse backgrounds.
2. Vigilant and systematic in identifying cybersecurity risks, with a passion for analyzing and investigating issues.
3. Good team player, capable of clear verbal and written communication.
4. Familiar with cybersecurity standards, protocols, frameworks, and policies such as MDOTS and HIM-ISP.
5. Strong technical foundation and willingness to learn new technologies and approaches.

Others

1. Required to be activated on-site to support cybersecurity and IT incident management and investigations as needed.

Please note that applications submitted through NHG Career Webpage (corp.nhg.com.sg/Careers), WH Career Webpage (wh.sg/joinus), JobStreet Singapore (jobstreet.com.sg), Singapore Medical Association (sma.org.sg), Singapore Nurses Association (sna.org.sg), MyCareersFuture.sg, LinkedIn, and WHC appointed recruitment agencies will be considered. If accessing this job posting from another channel, please visit the official channels mentioned above.