Clinical Engineering Cyber Specialist

Venturatalents; New York (NY); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Wellness Programs

401(k) with Match

PTO + Holidays

Career Growth & Tuition Reimbursement

Job summary

Sodexo is seeking a Clinical Engineering Cyber Specialist to drive medical device cybersecurity initiatives for a major hospital in Far Rockaway, NY. You will own the program’s technical execution, including CDE collection, risk assessments, and remediation coordination with device manufacturers and Hospital IT/InfoSec teams.

You will also mentor BMETs on cyber hygiene, participate in industry forums, and ensure audits and regulatory compliance across the HTM program.

Qualifications

• 3+ years of Medical Device Cybersecurity or Healthcare Technology/HTM/Clinical Engineering experience.
• Strong knowledge of CMMS platforms and cybersecurity frameworks (NIST, ISO 27001).
• Familiarity with FDA, Joint Commission, HIPAA regulations and audits.

Responsibilities

• Lead technical execution of the HTM cybersecurity program and data collection in CMMS.
• Oversee remediation: patching, upgrades, zero-day responses and risk assessments.
• Coordinate cybersecurity activities with device manufacturers, Hospital IT, and InfoSec.
• Lead testing and validation of network segmentation and IT/InfoSec collaboration.
• Support hospital IT projects affecting medical devices on the network.

Skills

CMMS familiarity

Cybersecurity frameworks

HIPAA compliance

Device/network security

Vendor coordination

Education

Bachelor's Degree or equivalent experience

Tools

CMMS platforms

Security testing tools

Job description

About The Client:

Client is a global leader in Healthcare Technology Management. This role supports reputed Hospital in Far Rockaway, NY, leading their medical device cybersecurity program.

Role Overview:

We are seeking a Clinical Engineering Cyber Specialist to lead and support the implementation of medical device cybersecurity strategies. You will own the technical execution of the healthcare cybersecurity program - from collecting critical cybersecurity data elements to vulnerability remediation, risk assessments, and collaboration with Hospital IT & InfoSec to secure and ensure availability of medical devices.

What You'll Do:

Technical Leadership - 80%

• Lead collection of Critical Cybersecurity Data Elements (CDEs) and manufacturer documentation in CMMS
• Conduct risk assessments based on CDEs and manufacturer recommendations
• Oversee out-of-the-box configuration of medical devices to cybersecurity standards
• Lead planned remediation (patching, upgrades) and unplanned remediation (zero-day response)
• Coordinate all cybersecurity activities directly with device manufacturers
• Lead testing and validation of network segmentation rules with Hospital IT
• Support IT projects that impact medical devices on the network

Program Support - 10%

• Investigate cybersecurity alerts on medical devices
• Analyze high/critical vulnerabilities and develop response recommendations
• Track and report vulnerability remediation activities & KPIs
• Drive continuous improvement for HTM and IT cybersecurity practices
• Ensure quality control of cybersecurity data in CMMS

Training & Compliance - 10%

• Provide HTM cybersecurity education and coach BMETs on cyber hygiene
• Represent Sodexo in industry cybersecurity forums/workgroups
• Advise on hospital audits - HIPAA, Joint Commission, FDA

What You Bring:

• 3+ years experience in Medical Device Cybersecurity or Healthcare Technology / HTM / Clinical Engineering
• Strong knowledge of CMMS platforms
• Strong knowledge of Cybersecurity Frameworks: NIST, ISO 27001
• Knowledge of FDA, Joint Commission, HIPAA regulations
• Proven ability to lead technical projects and cross-functional alignment with IT/InfoSec
• Valid driver's license with acceptable driving record
• Bachelor's Degree or equivalent experience

Preferred Certifications:

CISSP, HCISPP, CEH, Security+, CHTM, CHTS

What client Offers:

Medical, Dental, Vision, Wellness Programs, 401(k) with Match, Paid Time Off + Holidays, Career Growth & Tuition Reimbursement.

Screening Questions:

1. What CMMS have you used and have you collected CDEs?
2. Experience with medical device patching / zero-day response?
3. Exposure to NIST, ISO, FDA, HIPAA audits?
4. Have you worked directly with Hospital IT/InfoSec and device manufacturers?
5. Onsite in Far Rockaway, NY - are you local / willing to commute? Valid DL?