Cyber Security Analyst - Medical Devices

10 Children's Healthcare of Atlanta, Inc.; United States; On-site; USD 85,000 - 110,000; Full time

Job summary

Children’s Healthcare of Atlanta is seeking a Sr. Healthcare Technology Cybersecurity Analyst to lead day-to-day information security for healthcare technology management and oversee the medical device security framework within the CMMS program.

You will liaison with IS&T resources, support patching, password management, vulnerability management, and reporting of security metrics. Knowledge of vulnerability management, IDS/IPS, logs, incident response, and regulatory requirements is

Qualifications

• Three years of experience in security endpoint monitoring, patching, risk assessment, and vulnerability management.
• Healthcare setting and Medical Equipment security experience preferred.
• Bachelor's degree in computer science, IT, or related field or equivalent senior experience.

Responsibilities

• Develops capabilities to monitor and detect indicators of compromise using security scripts, tools, and services.
• Ensures integrity and protection of networks, systems, and applications by enforcing security policies through vulnerability monitoring.
• Leads definition and implementation of countermeasures to monitor and detect indicators of compromise.
• Collaborates with Biomedical Network Analyst, Information Security Analyst, Security Architect, Network team, and business units to implement security controls.
• Acts as escalation point for complex information security issues.
• Performs periodic and on-demand system audits and vulnerability assessments to determine compliance.
• Translates IT security impacts into secure, viable technical solutions.
• Develops project charters and objectives; presents proposals and solicits feedback.

Skills

Security monitoring

Patch management

Vulnerability management

Incident response

Network security

Education

Bachelor's degree in computer science / information technology or related field

Tools

CMMS software

Vulnerability scanners

SIEM

Job description

Job Description

Serves as lead for day-to-day operational specialist in the area of information security for healthcare technology management. Oversight of the medical device security framework for integration and supplemental support into Children’s Medical Equipment Management plan. Job duties include supporting the technical aspects of Clinical Engineering’s new equipment, software upgrades, patching, password management, and is to be the liaison with IS&T resources on such projects. The Sr. Healthcare Technology Cybersecurity Analyst also provides both technical and reporting guidance and support to team members as it relates to systems used for computerized maintenance management software. Additionally, they will partner with the IS&T security team on the collection and reporting of designated metrics and ensures that all identified medical devices are monitored for patching status, password management and vulnerability management. Understands multiple security platforms and layers, including vulnerability management, intrusion prevention systems, logging correlation/management, incident response, operating systems, protocols, and antivirus.

Experience

• Three years of experience in any combination of support and monitoring of security endpoints/servers, e.g., patch deployment/risk assessment/vulnerability scanners/security incident and event monitoring solutions/antivirus products, network security protocols and methodologies, information security and information technology controls, security penetration and vulnerability assessments, systems/network administration

Preferred Qualifications

• Five years of experience in computer operations, information security, and/or risk management
• Experience in a healthcare setting
• Experience specifically with Medical Equipment security and management

Education

• Bachelor's degree in computer sciences, information technology, related field, or equivalent senior experience

Certification

• No professional certifications required

Knowledge, Skills, and Abilities

Solid knowledge of Health Insurance Portability and Accountability Act, Joint Commission, and other information technology security governing bodies. Strong knowledge of accepted information systems and technology security regulations. Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s). Well-developed organizational, written communication, and analytical skills. Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities.

Job Responsibilities

• Develops capabilities necessary to monitor and detect indicators of compromise using security scripts, tools, and services.
• Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices.
• Assists and leads with the definition and implementation of countermeasures or mitigating controls to help monitor and detect indicators of compromise using security scripts, tools, and services.
• Works closely with the Biomedical Network Analyst, Information Security Analyst, Security Architect, Network infrastructure team, and business units to help implement security infrastructure and technical controls.
• Serves as an escalation point for complex and sensitive information security issues.
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance.
• Performs detailed analysis of business need, identifies IT security impacts or considerations, and translates into secure, viable technical solutions.
• Develops project charters and objectives.
• Provides presentations regarding proposals, soliciting feedback, promoting buy-in.
• Maintains current knowledge of relevant technology as assigned.
• Provides system performance monitoring and troubleshooting.
• Prepares incident reports of analysis methodology and results.
• Works independently or as a lead on projects of medium to high complexity.
• Establishes and maintains project plans; adjusts for potential impacts to meet deadlines.
• Evaluates new equipment (both hardware and disposables) and new technology from a design, modification, and usage perspective.
• As part of a Vendor Quality Assurance effort, evaluates vendor competencies and examines product history as it relates to hardware and software.
• Assists in developing and implementing consistent policies and procedures which guide and support the goals and objectives of the department as it relates to information security.
• Advises and participates in “ad hoc” committees on medical equipment issues, as assigned.
• Assists with oversight of all healthcare technology hardware and software upgrades.
• Healthcare Technology Management: Maintains or oversees the integrity of IS&T related technical fields in existing CMMS platform, updates the operational security status of equipment in existing management platform, and monitors and communicates compliance with specifications, codes, and hospital standards.

Equal Opportunity

Children’s Healthcare of Atlanta is an equal opportunity employer committed to providing equal employment opportunities to all qualified applicants and employees without regard to race, color, sex, religion, national origin, citizenship, age, veteran status, disability or any other characteristic covered by applicable law.

Primary Location

1571 Northeast Expy NE

Job Family

Engineering/Facility Mgmt

About Children’s

Children’s Healthcare of Atlanta has been 100 percent committed to kids for more than 100 years. A not-for-profit organization, Children’s is dedicated to making kids better today and healthier tomorrow. With 3 hospitals, 20 neighborhood locations and a total of 673 beds, Children’s is the largest healthcare provider for children in Georgia and one of the largest pediatric clinical care providers in the country. Children’s offers access to more than 60 pediatric specialties and programs and is ranked among the top children’s hospitals in the country by U.S. News & World Report. Children’s has been recognized as a Fortune 100 Best Place to Work, a Best Place for Working Mothers, and as a top employer for diversity and millennials. We offer a comprehensive compensation and benefit package that supports our mission, vision and values. We are proud to offer an array of programs and services to our employees that have distinguished us as a best place to work in the country. Connect to our mission of making kids better today and healthier tomorrow.

Have questions about the recruitment process? Check out What to Expect. https://careers.choa.org/lp/What%20to%20Expect/2895392d3ba166e6/?locale=en_US