Sr. IT Auditor Consultant, Hospital Medical Device IT Controls (BHJOB22048_756)

ITmPowered Consulting; Indiana (PA); Remote; USD 70,000 - 110,000; Full time

Job summary

An established industry player is seeking a Sr. IT Auditor Consultant to enhance cybersecurity measures for medical devices in large hospital networks. This role involves conducting IT controls assessments, performing full lifecycle audits, and documenting processes to secure over 350,000 connected medical devices. The ideal candidate will possess strong IT audit experience and relevant certifications, ensuring compliance with regulatory standards. Join a forward-thinking company dedicated to safeguarding healthcare technology and making a significant impact on patient safety.

Qualifications

• 3-5 years of experience leading end-to-end IT audits.
• CISA certification and knowledge of regulatory standards like HIPAA.

Responsibilities

• Conduct IT controls assessments for hospital cybersecurity programs.
• Write comprehensive assessment reports with findings and recommendations.

Skills

IT Audits

Cybersecurity

Risk Assessment

Control Frameworks

Documentation

Education

Bachelor’s degree in IT, CS, or related field

Tools

NIST 800-53

HITRUST

RMF

CSF

Job description

Sr. IT Auditor Consultant, Hospital Medical Device IT Controls (BHJOB22048_756)

Join to apply for the Sr. IT Auditor Consultant, Hospital Medical Device IT Controls (BHJOB22048_756) role at ITmPowered Consulting.

ITmPowered Consulting

Role Overview: Be on the frontlines of Technology Risk in Medical Device Cybersecurity. Large hospital networks with over 350,000 connected medical devices require secure IT controls to prevent cyber-attacks. Our client is implementing customized IT controls to secure Medical Devices, Healthcare Technology Management Operations, and connected hospital facilities.

Responsibilities:

• Conduct IT Controls Assessments for approximately 20 customized controls across the hospital's cybersecurity program.
• Perform full lifecycle audits: scope, plan, fieldwork, and reporting.
• Assess control design before implementation and control effectiveness post-implementation.
• Lead end-to-end IT controls assessments, including planning, execution, and reporting.
• Document IT controls processes and narratives.
• Conduct detailed testing with supporting artifacts.
• Write comprehensive assessment reports with findings and remediation recommendations.
• Evaluate IT risk controls throughout the device lifecycle and across various cybersecurity domains.

Qualifications:

• Bachelor’s degree in IT, CS, MIS, or related field, or equivalent experience.
• 3-5 years leading end-to-end IT audits.
• CISA certification; CISSP, CCSP, CEH, CRISA, Security+ or similar certifications preferred.
• Experience with IT process documentation and controls frameworks like NIST 800-53, RMF, CSF, HITRUST.
• Knowledge of HIPAA and other regulatory standards.

Preferred Experience:

• Experience managing electronic medical devices in hospital settings.
• Med Device cybersecurity certifications (e.g., CHTM, CBET).
• Familiarity with hospital Med Device Management systems like Nuvolo.

Logistics:

• Remote work within the US; preferred locations: Colorado or Georgia.
• COVID-19 vaccination and booster required or valid medical exemption.
• Must pass background checks and drug screening.
• US citizen or Green Card holder; no visa sponsorship available.
• W2 employment only; no sub vendors.
• Include current contact info on resume.

To apply, email your details to [e-mail].