Specific Job Responsibilities
Support secure network onboarding of medical, research, laboratory, and operational technologies, including evaluation of connectivity requirements and implementation of required security controls.
Interpret security requirements, risk assessment results, and technical information to determine and implement appropriate security configurations and controls.
Investigate and mitigate identified vulnerabilities and security findings through patching, configuration changes, compensating controls, or other appropriate measures.
Collaborate with HTM, OIS, IT, clinical teams, manufacturers, and vendors to implement security solutions while maintaining device functionality and clinical operations.
Support ongoing cybersecurity activities throughout the technology lifecycle, including system changes, upgrades, vulnerability remediation, and security improvements.
Document security configurations, implemented controls, mitigation activities, and technical outcomes.
Bachelors or Associates degree in Biomedical Electronics, Computer Science, Information Systems, Clinical Engineering or related major and at least 1 year experience with medical, research, lab, or operational equipment service or 1 year of information security experience.
This individual will have basic experience with security analysis for medical, research, lab, and operational systems and networks. Basic understanding of security concepts and controls for network, application and operating systems and work experience with logical access controls to ensure confidentiality, integrity and assurance of proprietary information. Basic knowledge of TCP/IP networking. This individual must present a professional image and possess excellent communication skills when dealing with staff, contractors and vendors. Responsibilities include serving as a security coach/mentor for clinical and HTM staff on an as needed basis. Demonstrated interpersonal skills including the ability to work effectively in a team environment and as a participant. Capacity to work independently and willingness to seek advice/assistance. Bachelor’s degree is preferred. Service experience with medical, research, lab and operational technologies is preferred.
Certified as CISSP, GIAC, Security +, Network +, or security equivalent; or will obtain certification within 2 years of hire.
Preferred Qualifications
Strong technical troubleshooting, analytical, and problem-solving skills.
Working knowledge of TCP/IP networking, operating systems, network connectivity, access controls, vulnerabilities, and cybersecurity controls.
Ability to interpret security requirements and translate them into practical technical configurations and mitigation actions.
Ability to balance cybersecurity controls with patient safety, clinical workflow, device functionality, and manufacturer requirements.
Strong initiative, attention to detail, and ability to manage multiple technical assignments while developing increasing independence.
Authorization to work and remain in the United States, without necessity for Mayo Clinic sponsorships now, or in the future (for example, be a U.S. Citizen, national, or permanent resident, refugee, or asylee). Mayo Clinic does not participate in the F-1 STEM OPT extension program.
During the selection process you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.
