Job DescriptionDue to the increasing importance to have focused resources on the security of medical devices, plus the need for a collaborative team that consists of GE HTM, IT, and other hospital personnel, the C-CST is a dedicated resource for “all things clinical device security related”.
1. Troubleshoot, install, maintain, and service repair needs on designated equipment,
specifically around issues related to device cybersecurity
Works closely with multiple device manufacturers regarding cybersecurity issues.
3. Works directly with customer IT and security personnel to implement site cyber security policies.
4. Evaluate progressively complex, customer biomedical equipmentissues and implement appropriate
remediations and/or compensating controls
. Provide support on imaging or LCS modality equipment first response and coordinate with appropriate modality specialists.5. Perform on-time and accurate
device level security actions
6. Own customer
clinical device security
issues from dispatch or identification of issue to resolution.9. Maintain daily communications with customers without direction.10. Follow as well as guide others as needed regarding appropriate GEpolicies, procedures, hospitalprotocol, and complete necessary documentation.12. Effectively communicate and partner with teammates and colleagues.14. Keep up to date on administrative responsibilities (e.g., maintaining
device level security information
and internal service records in a timely manner,
patch validation status
clinical device security and networking attributes – OS, MAC address, etc
15. Utilize the GEHC escalation process, as needed, and work closely with security operations center agents to define and support implementation of corrective action plans to resolve customer issues in a timely manner16. Identify potential sales leads and participate in sales opportunities (e.g., contract renewals, assist with promoting and implementing of revenue programs).17. Keep up to date with competitor information,
device security bulletins and
market trends.18. Identify business opportunities for the organization.19. May include basic/refresher application training of clinical staff and
customer security/IT personnel
on designated equipment.
1. Aware of and comply with the GEHC Quality Manual, Quality Management System, Quality Management Policy, Quality Goals, and applicable laws and regulations as they apply to this job type/position.
2. Meet Health and Human Services, Environment Health and Safety,
NIST
and all other applicable regulatory requirements.
3. Complete all planned Quality, EHS, and Compliance training within the defined deadlines.
4. Identify and report any and all customer clinical device security concerns immediately to the GE Security operations center.
5. Act as primary interface between the GEHC Security Operations Center (SOC) and the customer IT/security organization.
4. Identify and report any and all customer quality or compliance concerns immediately to the Quality Organization.
5. Identify and report any personal quality or compliance concerns immediately to the Quality Organization.
6. Ensure timely dispatch closure (if applicable).
7. Identify and report any unsafe workplace conditions or unsafe acts to the EHS Organization.
8. Ensure completion of all
security related tasks assigned
within prescribed timeframe (SLA’s)
9. Participate in continuous improvement activities by identifying and appropriately escalating process and product quality gaps, providing solutions when possible.
1. Associate’s or Bachelor’s degree in Electrical Engineering, Biomedical Engineering, Mechanical Engineering, IT or related field and 2+ years of experience servicing electrical equipment; OR equivalent military education and 2+ years of experience servicing medical equipment; OR High School Diploma/GED and 4+ years of experience servicing electrical equipment.
3. Strong communication skills with the ability to communicate technical issues to the customer in an easy to understand manner.
4. Experience diagnosing and repairing mechanical, electromechanical, and/or electronic equipment.
5. Experience troubleshooting and responding to customer concerns.
6. Experience with Web applications and technological programs (e.g., IPad, Iphone Microsoft Office Suite).
7. Capable of performing special physical requirements (e.g., able to lift, carry, push, pull up to 35 lbs unassisted; and frequently bend, stoop, twist, climb, crouch/squat, kneel/crawl, sit, stand for long periods of time; and reach at, above, below shoulder level; and flex/extend neck; and has good hand, finger dexterity and specific vision abilities including color, close vision, distance vision, peripheral vision, depth perception).
8. Must have and maintain a valid driver’s license.
1. Strong clinical expertise and knowledge across all GEHC systems and equipment. Background on NIST preferred
Strong experience with clinical device security (patching, SW loads, vulnerabilities
Experience with supporting clinical device security programs
4.
Strong working relationship with hospital IT and security professionals
5. Strong networking and interpersonal skills.
6. Strong time management and organization skills and ability to juggle multiple responsibilities.
7. Strong coaching and mentoring skills.
8. Self-motivated.
9. Training and experience in multiple modalities.
10. Exhibit the mentality that customers determine our success.
11. Operate with efficiency and sense of urgency.
12. Willingness to learn and adapt to changing environments.
13. Empower and inspire others.
14. Ability to deliver results in an uncertain environment.