Job Description Summary

Due to the increasing importance to have focused resources on the security of medical devices, plus the need for a collaborative team that consists of GE HTM, IT, and other hospital personnel, the C-CST is a dedicated resource for “all things clinical device security related”.
The C-CST will be the primary GEHC Services face to the customer(s) for all issues related to device cybersecurity. The C-CST will be the primary liaison between the GE HTM service team and the customer’s IT & security department as it relates to the security of medical devices. This leader establishes themselves as the expert for the Clinical Engineering Department related to medical device security including LCS, Imaging & Biomed devices and strives to drive customer satisfaction through service excellence. The C-CST will be part of the “SKEYE” product service and an extension of the Security Operations Center on site.

Job Description

Key responsibilities / essential functions include:
1. Troubleshoot, install, maintain, and service repair needs on designated equipment.

2. Works closely with multiple device manufacturers regarding cybersecurity issues.

3. Works directly with customer IT and security personnel to implement site cyber security policies.

4. Evaluate progressively complex, customer biomedical equipment security issues and implement appropriate remediations and/or compensating controls. Provide support on imaging or LCS modality equipment first response and coordinate with appropriate modality specialists.

5. Perform on-time and accurate device level security actions.

6. Own customer clinical device security issues from dispatch or identification of issue to resolution.

7. Maintain daily communication with customers to ensure resolution and proper follow-up, leading to customer satisfaction on all device security issues.

8. Focus on customer needs and satisfaction on device security issues, continuously building on and enhancing relationships with customers to become a perceived partner in their business who is able to recommend value-added services that will help the customer run their business more efficiently and securely.

9. Maintain daily communications with customers without direction.

10. Follow as well as guide others as needed regarding appropriate GE security policies, procedures, hospital security protocol, and complete necessary documentation.

11. Engage with other team members including Bio med engineers, Security Operations Center Agents and Remote Technical Engineers to ensure they are aware of the status of all security related issues at all times for their designated customers.

12. Effectively communicate and partner with teammates and colleagues.

13. Understand and communicate business goals and objectives to the broader GE team servicing assigned customer on device security.

14. Keep up to date on administrative responsibilities (e.g., maintaining device level security information and internal service records in a timely manner, patch validation status, clinical device security and networking attributes – OS, MAC address, etc).

15. Utilize the GEHC escalation process, as needed, and work closely with security operations center agents to define and support implementation of corrective action plans to resolve customer issues in a timely manner

16. Identify potential sales leads and participate in sales opportunities (e.g., contract renewals, assist with promoting and implementing of revenue programs).

17. Keep up to date with competitor information, device security bulletins and market trends.

18. Identify business opportunities for the organization.

19. May include basic/refresher application training of clinical staff and customer security/IT personnel on designated equipment.

Quality of Specific Goals:
1. Aware of and comply with the GEHC Quality Manual, Quality Management System, Quality Management Policy, Quality Goals, and applicable laws and regulations as they apply to this job type/position.
2. Meet Health and Human Services, Environment Health and Safety, NIST and all other applicable regulatory requirements.
3. Complete all planned Quality, EHS, and Compliance training within the defined deadlines.

4. Identify and report any and all customer clinical device security concerns immediately to the GE Security operations center.

5. Act as primary interface between the GEHC Security Operations Center (SOC) and the customer IT/security organization.
4. Identify and report any and all customer quality or compliance concerns immediately to the Quality Organization.
5. Identify and report any personal quality or compliance concerns immediately to the Quality Organization.
6. Ensure timely dispatch closure (if applicable).
7. Identify and report any unsafe workplace conditions or unsafe acts to the EHS Organization.
8. Ensure completion of all security related tasks assigned within prescribed timeframe (SLA’s)
9. Participate in continuous improvement activities by identifying and appropriately escalating process and product quality gaps, providing solutions when possible.

Required Qualifications:

1. Associate’s or bachelor’s degree in Electrical Engineering, Biomedical Engineering, Mechanical Engineering, IT or related field and 2+ years of experience servicing electrical equipment; OR equivalent military education and 2+ years of experience servicing medical equipment; OR High School Diploma/GED and 4+ years of experience servicing electrical equipment.

2. Experience interfacing with both internal team members and external customers as part of a solution-based service process.

3. Strong communication skills with the ability to communicate technical issues to the customer in an easy-to-understand manner. Strong rigor and task oriented delivery.

4. Experience diagnosing and repairing mechanical, electromechanical, and/or electronic equipment.

5. Experience troubleshooting and responding to customer concerns.

6. Experience with Web applications and technological programs (e.g., IPad, Iphone Microsoft Office Suite).

7. Capable of performing special physical requirements (e.g., able to lift, carry, push, pull up to 35 lbs unassisted; and frequently bend, stoop, twist, climb, crouch/squat, kneel/crawl, sit, stand for long periods of time; and reach at, above, below shoulder level; and flex/extend neck; and has good hand, finger dexterity and specific vision abilities including color, close vision, distance vision, peripheral vision, depth perception).

8. Must have and maintain a valid driver’s license.

Preferred Qualifications:

1. Strong clinical expertise and knowledge across all GEHC systems and equipment. Background on NIST preferred
2. Strong experience with clinical device security (patching, SW loads, vulnerabilities).
3. Experience with supporting clinical device security programs.
4. Strong working relationship with hospital IT and security professionals.
5. Strong networking and interpersonal skills.
6. Strong time management and organization skills and ability to juggle multiple responsibilities.
7. Strong coaching and mentoring skills.
8. Self-motivated.
9. Training and experience in multiple modalities.
10. Exhibit the mentality that customers determine our success.
11. Operate with efficiency and sense of urgency.
12. Willingness to learn and adapt to changing environments.
13. Empower and inspire others.
14. Ability to deliver results in an uncertain environment.

#LI-PA1

#LI-Onsite

We will not sponsor individuals for employment visas, now or in the future, for this job opening.

While GE HealthCare does not currently require U.S. employees to be vaccinated against COVID-19, some GE HealthCare customers have vaccination mandates that may apply to certain GE HealthCare employees.