BMET Cybersecurity Specialist

Sodexo Careers•Greensboro, NC

13d

About The Position

Leading and supporting the implementation of medical device cybersecurity strategies! Sodexo is seeking a BMET Cybersecurity Specialist to oversee and execute critical technical components of our healthcare cybersecurity program. This role leads the implementation of cybersecurity controls, performs risk assessments, and collaborates closely with hospital IT and InfoSec teams to ensure the security and availability of medical devices. The ideal candidate will bring strong technical leadership, a proactive approach to threat mitigation, and a deep understanding of healthcare regulatory requirements.

Requirements

Bachelor’s degree in information technology, Biomedical Engineering, Cybersecurity, or a related field (or equivalent experience).
Experience in medical device cybersecurity or a healthcare technology environment.
Strong knowledge of CMMS platforms, cybersecurity frameworks (e.g., NIST, ISO), and FDA/Joint Commission regulations.
Experience collaborating with clinical engineering, IT, and InfoSec teams.
Proven ability to lead technical projects and drive cross-functional alignment.
Minimum Functional Experience: 3 years

Nice To Haves

Relevant certifications (e.g., CISSP, HCISPP, CEH, or Security+) preferred

Responsibilities

Lead the collection of critical cybersecurity data elements (CDEs) and manufacturer documentation in CMMS, and conduct risk assessments based on those findings.
Oversee configuration of medical devices to align with cybersecurity standards and manufacturer guidelines.
Manage planned and unplanned vulnerability remediation efforts, including response to zero-day threats and coordination with device manufacturers.
Collaborate with hospital IT teams to test and validate network segmentation rules and support IT projects that impact medical devices.
Investigate cybersecurity alerts on medical devices, analyze high-risk vulnerabilities, and develop response recommendations.
Track and report on vulnerability remediation activities while identifying opportunities to improve cybersecurity practices across HTM and IT.
Support HTM cybersecurity education, coach BMETs on best practices, and represent Sodexo in industry cybersecurity forums.
Provide guidance during hospital and enterprise audits, including HIPAA and Joint Commission reviews, ensuring alignment with cybersecurity requirements.