Clinical Engineering Cyber Specialist

Location: Far Rockaway, New YorkJob Type: Full-Time | On-Site ## About the RoleESO Consultants is seeking an experienced Clinical Engineering Cyber Specialist to support a healthcare client in Far Rockaway, NY. This position is responsible for leading the cybersecurity program for medical devices across the hospital environment, ensuring clinical technology remains secure, compliant, and operational.The ideal candidate will have strong expertise in healthcare technology management (HTM), medical device cybersecurity, vulnerability management, and regulatory compliance, while collaborating closely with Information Security, IT, Clinical Engineering, and medical device manufacturers. ## Key Responsibilities * Lead the collection and maintenance of Critical Data Elements (CDEs) and manufacturer cybersecurity documentation within the CMMS platform. * Perform cybersecurity risk assessments for medical devices and recommend mitigation strategies. * Configure and maintain medical devices in accordance with manufacturer recommendations and cybersecurity best practices. * Manage planned and emergency vulnerability remediation activities, including zero-day vulnerability response. * Coordinate with medical device manufacturers regarding software patches, firmware updates, and cybersecurity advisories. * Investigate cybersecurity alerts affecting medical devices and analyze high-risk vulnerabilities. * Develop recommendations and action plans to address identified cybersecurity risks. * Track remediation activities and generate reports for leadership and compliance purposes. * Identify opportunities to improve cybersecurity processes across Clinical Engineering and Information Technology departments. * Support cybersecurity awareness and education initiatives for Healthcare Technology Management (HTM) staff. * Coach Biomedical Equipment Technicians (BMETs) on cybersecurity best practices. * Represent the organization in industry cybersecurity forums, committees, and professional organizations. * Collaborate with cross-functional teams to strengthen the organization's medical device cybersecurity posture. ## Required Qualifications * Bachelor's degree in Cybersecurity, Information Technology, Biomedical Engineering, Clinical Engineering, Healthcare Technology Management, or a related field, or an equivalent combination of education and experience. * Minimum of 3 years of experience in medical device cybersecurity, healthcare technology management, clinical engineering, or a related technical field. * Strong understanding of medical device cybersecurity principles and risk management. * Experience with Computerized Maintenance Management Systems (CMMS). * Knowledge of cybersecurity frameworks such as NIST, ISO, and industry best practices. * Familiarity with FDA guidance, Joint Commission standards, and healthcare cybersecurity regulations. * Experience leading technical initiatives and collaborating with cross-functional teams. * Excellent analytical, problem-solving, communication, and organizational skills. * Valid driver's license with an acceptable driving record. ## Preferred Qualifications * Professional cybersecurity certifications such as: * CISSP (Certified Information Systems Security Professional) * HCISPP (HealthCare Information Security and Privacy Practitioner) * CEH (Certified Ethical Hacker) * CompTIA Security+ ## Position SummaryThe Clinical Engineering Cyber Specialist leads the technical execution of the organization's medical device cybersecurity program. This includes asset inventory management, implementation of cybersecurity controls, vulnerability remediation, risk assessment, incident response, and reporting cybersecurity metrics to leadership. The role also supports continuous improvement initiatives to enhance the security and resilience of clinical technology systems. ## Benefits * Competitive compen