Cyber Security Analyst - Medical Devices

Children's Healthcare of Atlanta; Brookhaven (GA); On-site; USD 95,000 - 125,000; Full time

Job summary

Children’s Healthcare of Atlanta is seeking a Sr. Healthcare Technology Cybersecurity Analyst to lead day-to-day operations in information security for healthcare technology management.

Responsibilities include overseeing the medical device security framework, supporting upgrades, patching, password management, and serving as liaison with IS&T on projects. The role partners with IS&T security teams, conducts vulnerability management, incident response, and compliance monitoring across CMMS

Qualifications

• Three years of experience in security endpoints/servers monitoring, patching, risk assessment, vulnerability scanners and related areas.
• Experience in healthcare setting and with medical equipment security is preferred.
• Bachelor's degree in computer sciences or related field or equivalent senior experience.

Responsibilities

• Develops capabilities to monitor and detect indicators of compromise using security scripts, tools, and services.
• Leads with definition and implementation of countermeasures or mitigating controls to monitor threats.
• Works with IS&T teams to implement security infrastructure and controls; escalation point for complex security issues.
• Performs periodic system audits and vulnerability assessments to determine compliance.
• Translates IT security needs into secure technical solutions and develops project charters and objectives.
• Provides presentations and secures buy-in for proposals.
• Maintains knowledge of relevant technology and monitors system performance.
• Prepares incident reports and leads medium-to-high complexity projects.
• Evaluates new equipment and technology from design and usage perspectives.
• Assists in developing policies and participates in committees on medical equipment issues.

Skills

Vulnerability management

Incident response

Security auditing

CMMS familiarity

Healthcare IT security

Education

Bachelor's degree in computer sciences

Tools

Security scripting tools

Job description

Work Shift

Day

Work Day(s)

Monday-Friday

Shift Start Time

7:30 AM

Shift End Time

4:00 PM

Worker Sub-Type

Regular

Children’s is one of the nation’s leading children’s hospitals. No matter the role, every member of our team is an essential part of our mission to make kids better today and healthier tomorrow. We’re committed to putting you first, and that commitment is at the heart of our company culture: People first. Children always. Find your next career opportunity and make a difference doing what you love at Children’s.

Job Description

Serves as lead for day-to-day operational specialist in the area of information security for healthcare technology management. Oversight of the medical device security framework for integration and supplemental support into Children’s Medical Equipment Management plan. Job duties include supporting the technical aspects of Clinical Engineering’s new equipment, software upgrades, patching, password management, and and is to be the liaison with IS&T resources on such projects. The Sr. Healthcare Technology Cybersecurity Analyst also provides both technical and reporting guidance and support to team members as it relates to systems used for computerized maintenance management software. Additionally, they will partner with the IS&T security team on the collection and reporting of designated metrics and ensures that all identified medical devices are monitored for patching status, password management and vulnerability management. Understands multiple security platforms and layers, including vulnerability management, intrusion prevention systems, logging correlation/management, incident response, operating systems, protocols, and antivirus.

Experience

• Three years of experience in any combination of support and monitoring of security endpoints/servers, e.g., patch deployment/risk assessment/vulnerability scanners/security incident and event monitoring solutions/antivirus products, network security protocols and methodologies, information security and information technology controls, security penetration and vulnerability assessments, systems/network administration

Preferred Qualifications

• Five years of experience in computer operations, information security, and/or risk management
• Experience in a healthcare setting
• Experience specifically with Medical Equipment security and management

Education

• Bachelor's degree in computer sciences, information technology, related field, or equivalent senior experience

Certification Summary

• No professional certifications required

Knowledge, Skills, And Abilities

• Solid knowledge of Health Insurance Portability and Accountability Act, Joint Commission, and other information technology security governing bodies
• Strong knowledge of accepted information systems and technology security regulations
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Well-developed organizational, written communication, and analytical skills
• Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities

Job Responsibilities

• Develops capabilities necessary to monitor and detect indicators of compromise using security scripts, tools, and services. Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.
• Assists and leads with the definition and implementation of countermeasures or mitigating controls to help monitor and detect indicators of compromise using security scripts, tools, and services.
• Works closely with the Biomedical Network Analyst, Information Security Analyst, Security Architect, Network infrastructure team, and business units to help implement security infrastructure and technical controls. Serves as an escalation point for complex and sensitive information security issues.
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance.
• Performs detailed analysis of business need, identifies IT security impacts or considerations, and translates into secure, viable technical solutions. Develops project charters and objectives.
• Provides presentations regarding proposals, soliciting feedback, promoting buy-in.
• Maintains current knowledge of relevant technology as assigned. Provides system performance monitoring and troubleshooting.
• Prepares incident reports of analysis methodology and results. Works independently or as a lead on projects of medium to high complexity. Establishes and maintains project plans; adjusts for potential impacts to meet deadlines.
• Evaluates new equipment (both hardware and disposables) and new technology from a design, modification, and usage perspective.
• As part of a Vendor Quality Assurance effort, evaluates vendor competencies and examines product history as it relates to hardware and software.
• Assists in developing and implementing consistent policies and procedures which guide and support the goals and objectives of the department as it relates to information security.
• Advises and participates in “ad hoc” committees on medical equipment issues, as assigned.
• Assists with oversight of all healthcare technology hardware and software upgrades.
• Healthcare Technology Management: Maintains or oversees the integrity of IS&T related technical fields in existing CMMS platform, updates the operational security status of equipment in existing management platform, and monitors and communicates compliance with specifications, codes, and hospital standards.

Children’s Healthcare of Atlanta is an equal opportunity employer committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, sex, religion, national origin, citizenship, age, veteran status, disability or any other characteristic covered by applicable law.

Primary Location Address

1571 Northeast Expy NE

Job Family

Engineering/Facility Mgmt