Clinical Engineering Cyber Specialist

Skyelia•Woodmere, NY

About The Position

Sodexo is seeking a Clinical Engineering Cyber Specialist to oversee and execute critical technical components of its healthcare cybersecurity program for St. John’s Episcopal Hospital in Far Rockaway, New York. The role leads implementation of cybersecurity controls, conducts risk assessments, and collaborates with hospital IT and InfoSec teams to help secure and maintain the availability of medical devices. The specialist leads technical activities for the medical device cybersecurity program, including collecting cybersecurity data elements in the asset inventory, implementing controls, and executing critical cybersecurity fixes. The role analyzes emerging threats for their impact on inventoried devices, advises on cybersecurity strategy and improvement opportunities, and supports the collection of metrics and key performance indicators for leadership review. Work is allocated across technical support (80%), program support (10%), training (5%), and regulatory and compliance (5%).

Requirements

Experience in medical device cybersecurity or a healthcare technology environment.
Valid driver’s license and acceptable driving record.
Strong knowledge of CMMS platforms and cybersecurity frameworks such as NIST and ISO.
Knowledge of FDA and Joint Commission regulations.
Proven ability to lead technical projects and drive cross-functional alignment.
Bachelor’s degree or equivalent experience.
At least 3 years of functional experience.

Nice To Haves

Relevant certifications such as CISSP, HCISPP, CEH, or Security+.

Responsibilities

Lead collection of Critical Data Elements (CDEs) and manufacturer documentation and cybersecurity recommendations in the CMMS.
Conduct asset risk assessments based on collected CDEs and documentation.
Oversee medical-device configuration to meet expected cybersecurity standards and manufacturer guidelines.
Lead planned vulnerability remediation, including patching and upgrades, and unplanned remediation, including responses to zero-day threats.
Coordinate cybersecurity activities with device manufacturers as needed.
Lead testing and validation of network segmentation rules in coordination with hospital IT.
Support IT projects that affect medical devices on the network.
Investigate alerts on medical devices in the hospital and clinics; analyze high- and critical-risk vulnerabilities and develop response recommendations.
Track and report vulnerability remediation activities and identify opportunities to improve cybersecurity practices across HTM and IT.
Oversee quality control for cybersecurity data and documentation in the CMMS.
Support cybersecurity education and awareness for HTM teams; coach BMETs on cybersecurity hygiene and out-of-the-box controls.
Participate in industry cybersecurity workgroups and forums as a Sodexo representative, and complete mandatory technical and non-technical training.
Advise on hospital cybersecurity audits, including HIPAA and Joint Commission audits, and enterprise cybersecurity audits in alignment with enterprise leadership.
Support collection of cybersecurity metrics and key performance indicators for leadership review.