HTM Associate Information Security Engineer

Mayo Career Site US; Eau Claire (WI); On-site; USD 85,000 - 115,000; Full time

Job summary

Mayo Clinic in Eau Claire, Wisconsin, seeks an Associate Information Security Engineer to join the Healthcare Technology Management (HTM) cybersecurity team. The role blends healthcare technology, networking and cybersecurity to secure medical, research, laboratory, and operational technologies.

You will support secure network onboarding, implement security controls, mitigate risks and collaborate with HTM, Information Security, IT, clinical teams, manufacturers, and vendors across the

Qualifications

• HTM and/or Information Security professional required.
• Research and configuration of systems to protect Mayo Clinic environments.

Responsibilities

• Support secure network onboarding of medical, research, laboratory, and operational technologies, including evaluation of connectivity requirements and implementation of required security controls.
• Interpret security requirements, risk assessment results, and technical information to determine and implement appropriate security configurations and controls.
• Investigate and mitigate identified vulnerabilities and security findings through patching, configuration changes, compensating controls, or other appropriate measures.
• Collaborate with HTM, OIS, IT, clinical teams, manufacturers, and vendors to implement security solutions while maintaining device functionality and clinical operations.
• Support ongoing cybersecurity activities throughout the technology lifecycle, including system changes, upgrades, vulnerability remediation, and security improvements.
• Document security configurations, implemented controls, mitigation activities, and technical outcomes.

Job description

We are seeking a motivated and technically skilled Associate Information Security Engineer to join our Healthcare Technology Management (HTM) cybersecurity team in Eau Claire, Wisconsin. This role combines healthcare technology, networking, and cybersecurity to support the secure implementation and ongoing protection of medical, research, laboratory, and operational technologies. The ideal candidate will support secure network onboarding, implement identified security controls, mitigate cybersecurity risks and vulnerabilities, and collaborate with HTM, Information Security, IT, clinical teams, manufacturers, and vendors throughout the technology lifecycle.

The HTM Associate Information Security Engineer position requires a Healthcare Technology Management (HTM) and/or Information Security professional who is result oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments. This position is responsible for the research and configuration of systems and procedures to ensure the protection of information processed, stored, or transmitted in Mayo Clinic's healthcare/operational technology environments. This position provides basic security deployment and/or consultation for various projects and initiatives. The incumbent also assists system users relative to medical, research, lab, and operational system security matters and undertakes projects requiring specialized technical knowledge. This position receives guidance from HTM leadership and other HTM Information Security Engineers/Analysts.

Specific Job Responsibilities

• Support secure network onboarding of medical, research, laboratory, and operational technologies, including evaluation of connectivity requirements and implementation of required security controls.
• Interpret security requirements, risk assessment results, and technical information to determine and implement appropriate security configurations and controls.
• Investigate and mitigate identified vulnerabilities and security findings through patching, configuration changes, compensating controls, or other appropriate measures.
• Collaborate with HTM, OIS, IT, clinical teams, manufacturers, and vendors to implement security solutions while maintaining device functionality and clinical operations.
• Support ongoing cybersecurity activities throughout the technology lifecycle, including system changes, upgrades, vulnerability remediation, and security improvements.
• Document security configurations, implemented controls, mitigation activities, and technical outcomes.