Lead and coordinate a medical device cybersecurity program, including risk assessments, vulnerability remediation, and cross-functional collaboration with IT and HTM teams.

Job Description

Role overview: Lead and support the implementation of medical device cybersecurity strategies within a healthcare environment. The specialist will oversee critical technical components of the cybersecurity program, collaborate with IT and information security teams, and drive threat mitigation in compliance with healthcare regulations.

What You’ll Do

Lead collection of Critical Data Elements (CDEs) and manufacturer documentation in the CMMS; conduct risk assessments based on findings.
Oversee configuration of medical devices to align with cybersecurity standards and manufacturer guidelines.
Manage planned and unplanned vulnerability remediation efforts, including response to zero-day threats and coordination with device manufacturers.
Investigate cybersecurity alerts on medical devices, analyze high-risk vulnerabilities, and develop response recommendations.
Track and report on remediation activities; identify opportunities to improve cybersecurity practices across HTM and IT.
Support HTM cybersecurity education, coach biomedical equipment technicians on best practices, and participate in industry cybersecurity forums.

What You Bring

Experience in medical device cybersecurity or a healthcare technology environment.
A valid driver’s license and an acceptable driving record.
Strong knowledge of CMMS platforms, cybersecurity frameworks (e.g., NIST, ISO), and healthcare regulations (FDA and Joint Commission).
Proven ability to lead technical projects and drive cross-functional alignment.
Relevant certifications (e.g., CISSP, HCISPP, CEH, or Security+) preferred.

Minimum Qualifications & Requirements

Bachelor's degree or equivalent experience.
Minimum 3 years of relevant functional experience.

Position Summary

Leads the technical activities involved in delivering a medical device cybersecurity program, including inventorying cybersecurity data, implementing controls, and executing critical fixes. Analyzes emerging threats to determine potential impact on devices in the inventory. Advises on technical elements of cybersecurity strategy and supports metrics collection for leadership review.

What We Offer

We offer a comprehensive benefits package and a competitive compensation approach based on experience and education. Benefits may include:

Medical, dental, vision care and wellness programs
401(k) plan with matching contributions
Paid time off and company holidays
Career growth opportunities and tuition reimbursement

Additional Details

Location: Far Rockaway, NY area. Local candidate preferred; onsite role with relocation not provided.
Onsite role; direct-hire arrangement considered for strongly qualified candidates.

About Us

Celestrix

is a business consulting and advisory practice built for organizations that think beyond the ordinary. We work across industries to help businesses grow with clarity, operate with purpose, and build the teams and strategies that drive long term success.

From talent to transformation, we bring together the right people, the right ideas, and the right solutions to move businesses forward.

Medical Device Cybersecurity Specialist

Job description