BMET Cybersecurity Specialist

Entegra; Greensboro (NC); On-site; USD 74,000 - 96,000; Full time

Benefits offered by this job

Medical, Dental, Vision care

401(k) Plan with Matching

Paid Time Off and Holidays

Tuition Reimbursement

Job summary

Sodexo is seeking a BMET Cybersecurity Specialist to protect healthcare technology across the Cone Health system, based at Moses H. Cone Memorial Hospital in Greensboro, NC.

This role leads technical activities and supports device cybersecurity compliance and incident response. The ideal candidate has deep medical device cybersecurity knowledge, strong IT fundamentals, and the ability to work independently while collaborating with HTM teams and device manufacturers to improve security and

Qualifications

• Deep knowledge of medical device design, maintenance and function in clinical settings.
• Hands-on cybersecurity experience in healthcare or comparable industry.
• Ability to learn how connected clinical equipment interacts with hospital networks.

Responsibilities

• Lead technical activities delivering a medical device cybersecurity program across the system.
• Analyze emerging cybersecurity threats and assess impact on devices in inventory.
• Collect metrics and KPIs for leadership review and program improvements.
• Collaborate with HTM teams and device manufacturers; perform tasks independently when needed.
• Investigate cybersecurity incidents, gather technical information, and coordinate response activities.

Skills

Medical device cybersecurity

Cybersecurity

Networking fundamentals

Troubleshooting

Clinical environment awareness

Education

Bachelor’s degree or equivalent experience

Job description

Sodexo is seeking a motivated, technically skilled BMET Cybersecurity Specialist to support healthcare technology cybersecurity across the Cone Health system.

Based at Moses H. Cone Memorial Hospital in Greensboro, North Carolina, this role is part of a system-wide program focused on protecting connected medical devices, supporting cybersecurity compliance, and strengthening the security and reliability.

About the job

Leads the technical activities associated with the delivery of a medical device cybersecurity program, such as collection of cybersecurity data elements in the asset inventory, implementation of cybersecurity controls, and execution of critical cybersecurity fixes. Leads the technical analysis of emerging cybersecurity threats to determine impact to any devices in the asset inventory. Advises on technical elements of cybersecurity strategy, including recommendations for improvement. Supports the collection of metrics and key performance indicators for leadership review.

The role of an individual contributor within the organization focuses on completing specific tasks and projects; contributing directly through their skills and expertise. Performs specialized technical tasks to support operations. Work is primarily achieved independently, however may collaborate with a team.

Pay Range: $74290 - $96140

What’s in it for you

Support the identification, inventory, classification, and tracking of connected medical devices and their relevant cybersecurity attributes, including operating systems, software versions, network connectivity, and manufacturer support status.

Assist with investigating potential medical device cybersecurity incidents, gathering technical information, documenting findings, and coordinating response activities with appropriate teams.

• Lead the collection of Critical Data Elements (CDEs) in CMMS
• Supports a range of IT projects that have implications for medical devices on the network
• Lead the coordination of cybersecurity activities with device manufacturers as needed
• Oversee the investigation of alerts on medical devices in the hospital and clinics
• Lead collection of manufacturer documentation and cybersecurity recommendations
• Support HTM cybersecurity education & awareness for HTM teams
• Coach BMETs on basic cybersecurity hygiene and out of the box controls

What you’ll bring

A strong computer and IT background, including an understanding of operating systems, computer hardware, networking fundamentals, software, and troubleshooting.

An interest in medical device cybersecurity and the ability to learn how connected clinical equipment interacts with hospital networks and healthcare systems.

• Medical Device Knowledge - very deep knowledge of the design of medical devices including protocols for device maintenance, understanding of common challenges and limitations with medical devices, thorough knowledge of medical device functions and how they are used for patient care
• Software and Server Management - knowledge and experience with hands-on management of highly technical and sensitive hardware and software used to support the delivery of patient care, includes the daily management of key components to ensure high uptime and availability, some experience with the triage and troubleshooting of highly technical scenarios, some ability to oversee the response to both planned and unplanned downtime of key components
• Strong Awareness of Hospital Processes - clear understanding of how hospital departments operate including common roles and processes, awareness of critical safety protocols when in clinical areas, demonstrates appropriate behavior and awareness of surroundings in clinical areas
• Drive for Results - ability to coordinate access & interactions with medical devices under complex and tense situations, resilience to changes or barriers in access to medical devices, ability to negotiate and compromise with others to achieve goals
• Demonstrated Specialization in Cybersecurity - clear passion for cybersecurity for medical devices, demonstrated experience with hands-on cybersecurity activities in healthcare or comparable industry, evidence of structured learning and/or self-learning on cybersecurity topics, currently has or is pursuing certification in cybersecurity

Requirements

• Education Requirement: Bachelor’s degree or equivalent experience
• Related Experience: 3 years

What we offer

Compensation is fair and equitable, partially determined by a candidate's education level or years of relevant experience. Salary offers are based on a candidate's specific criteria, like experience, skills, education, and training. Sodexo offers a comprehensive benefits package that may include:

• Medical, Dental, Vision Care and Wellness Programs
• 401(k) Plan with Matching Contributions
• Paid Time Off and Company Holidays
• Career Growth Opportunities and Tuition Reimbursement

More extensive information is provided to new employees upon hire.

Who we are

At Sodexo, our purpose is to create a better everyday for everyone and build a better life for all. We believe in improving the quality of life for those we serve and contributing to the economic, social, and environmental progress in the communities where we operate. Sodexo partners with clients to provide a truly memorable experience for both customers and employees alike. We do this by providing food service, catering, facilities management, and other integrated solutions worldwide.

Our company values you for you; you will be treated fairly and with respect, and you can be yourself. You will have your ideas count and your opinions heard because we can be a stronger team when you’re happy at work. This is why we embrace diversity and inclusion as core values, fostering an environment where all employees are valued and respected. We are committed to providing equal employment opportunities to individuals regardless of race, color, religion, national origin, age, sex, gender identity, pregnancy, disability, sexual orientation, military status, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.