Clinical Engineering Cyber Specialist

YK Solutions • Far Rockaway, NY

6d • Onsite

About The Position

The Clinical Engineering Cyber Specialist leads and supports the implementation of a hospital medical device cybersecurity program. The role oversees technical activities such as collecting cybersecurity data and manufacturer documentation in the CMMS, assessing device risk, implementing cybersecurity controls, and carrying out planned and urgent vulnerability remediation. The specialist analyzes emerging threats and alerts, advises on cybersecurity strategy, and works closely with hospital IT, information security teams, device manufacturers, and HTM teams to protect the security and availability of medical devices.

The position also supports metrics and leadership reporting, improves cybersecurity practices across HTM and IT, contributes to cybersecurity education, and advises on audits involving HIPAA, Joint Commission, and enterprise cybersecurity requirements. The role is on-site at a hospital in Far Rockaway, New York.

Requirements

• Biomedical/biomed experience or equivalent experience working with medical devices.
• Healthcare cybersecurity experience, including experience in medical device cybersecurity or a healthcare technology environment.
• At least 3 years of minimum functional experience.
• Bachelor’s degree or equivalent experience.
• Valid driver’s license and acceptable driving record.
• Strong knowledge of CMMS platforms, cybersecurity frameworks such as NIST and ISO, and FDA/Joint Commission regulations.
• Proven ability to lead technical projects and drive cross-functional alignment.

Nice To Haves

• Relevant certifications such as CISSP, HCISPP, CEH, or Security+.
• Experience with patient monitoring applications.
• Experience with telemetry and clinical application platforms.
• Experience with medical device software upgrades.
• Experience with medical device integrations and interfaces.
• Experience in central station environments.
• Experience with connected device ecosystems.
• Strong BMET 2 or BMET 3 candidates with exposure to the preferred areas may be developed into the cybersecurity role.

Responsibilities

• Lead the collection of critical cybersecurity data elements and manufacturer documentation in the CMMS, and conduct risk assessments based on the findings.
• Oversee medical device configuration to align with cybersecurity standards and manufacturer guidelines.
• Lead planned vulnerability remediation, including patching and upgrades, and unplanned remediation, including responses to zero-day threats.
• Coordinate cybersecurity activities with medical device manufacturers as needed.
• Investigate medical device cybersecurity alerts and analyze high- and critical-risk vulnerabilities; develop response recommendations.
• Lead testing and validation of network segmentation rules in coordination with hospital IT.
• Support IT projects that affect medical devices on the network.
• Track and report vulnerability remediation activities and identify improvements to cybersecurity practices across HTM and IT.
• Oversee quality control of cybersecurity data and documentation in the CMMS.
• Support HTM cybersecurity education and awareness, coach BMETs on cybersecurity hygiene and out-of-the-box controls, and complete mandatory training.
• Represent the company in industry cybersecurity workgroups and forums.
• Advise on hospital cybersecurity audits, including HIPAA and Joint Commission audits, and enterprise cybersecurity audits in alignment with enterprise leadership.
• Support collection of metrics and key performance indicators for leadership review.

Benefits

• Comprehensive benefits package that may include medical, dental, and vision care and wellness programs.
• 401(k) plan with matching contributions.
• Paid time off and company holidays.
• Career growth opportunities.
• Tuition reimbursement.

What This Job Offers

• Job Type: Full-time