Sr. IT Auditor Consultant, Hospital Medical Device IT Controls
2 days ago
Be on the frontlines of Technology Risk in the emerging area of Medical Device Cybersecurity A large national hospital network can have over 350,000 connected medical devices. Many of these interconnected devices (hospital imaging equipment, patient monitoring, IV pumps, blood spinners.) and connected hospital facilities devices (elevators, door locks, ID Card readers) are exposed publicly and vulnerable to cyber-attack. To help protect this large IoMT network, our client is implementing a customized set IT Controls to secure their Medical Devices, Healthcare Technology Management Operations, and Hospital Facilities connect IT devices.
About the Role:
The Sr. IT Auditor Consultant will serve on behalf of the Technology Risk Management organization performing IT Controls Assessments for a set of 20 custom IT controls in this Hospital Medical Device Cybersecurity Program. Plan and perform full lifecycle audits (scope, plan, fieldwork, reporting) assessing Audit IT Controls Design prior to implementation and IT Controls Execution once implemented. Helping the Med Device Cybersecurity team where they have controls gaps and findings and understand how effective IT controls should be implemented.
WHAT YOU'LL ACCOMPLISH
- As a part of the Technology Risk Office this role will be conducting IT Controls Assessments (IT Audits) of roughly 20 customized Medical Device cybersecurity IT Controls being implemented enterprise wide.
- Conduct full IT Controls Risk Assessments on each of 20+ custom Med Device cybersecurity IT Controls twice.
- First by testing Controls Design (does it make sense) prior to implementation and
- Second testing Controls Execution (is control actually working) once the controls are implemented.
- Spearhead IT Controls Assessments end to end (scoping, planning, fieldwork/controls testing, and reporting)
- Scope and Plan IT Controls Assessment engagements. Lead Kickoff meetings, set expectations and schedule.
- Clearly document IT Controls processes narratives (step 1, 2, 3...) of planned or current IT Control processes.
- Fieldwork - Conduct detailed IT Controls Testing, gather, and document detailed IT Controls test results supported by clear evidentiary artifacts.
- Reporting - Write full IT Controls Assessment (IT Audit) Reports - Assessment Scope, Audit details, controls inspection / testing results, IT Controls Assessment Findings with clearly communicated Risk severity, likelihood, impact, and Controls deficiency Risk Remediation Recommendations and Corrective Action Plans.
- Plan & conduct complex IT Audit Controls Assessments for Hospital Medical Device cybersecurity through full device lifecycle (device procurement, intake, implementation, operations, maintenance, decommissioning)
- Assess IT Risk Controls for Hospital Med Device Cybersecurity Controls across IAM, logical access, password vaulting, network security, logging and monitoring, vulnerability management, change management, etc.)
- Bachelor's degree. BS/BA in IT, CS, MIS or related field preferred. or equivalent work experience.
- 3-5 years leading IT Audits end to end (scoping, planning fieldwork/controls testing, reporting).
- CISA certification and CISSP, CCSP, CEH, CRISA, Security+ or similar, related certification.
- Solid expertise in documenting processes IT Audit narratives (step 1, 2, 3...) of planned or current processes.
- Solid understanding of IT Controls and controls frameworks, NIST 800-53, RMF, CSF, HITRUST, etc.
- Understanding of HIPAA and other regulatory frameworks (e.g., HIPAA, PCI, SOX, GDPR, etc.)
- Experience advising and providing guidance on effective IT Controls Implementation.
- Prior experience in a hospital provider environment managing electronic medical devices equipment.
- 1-3 years' experience electronic medical device management, operations, or cybersecurity in a hospital.
- Med Device Certifications: CHTM, CBET, CABT, CRES, or Med Device cybersecurity certifications.
- Familiarity in Hospital Medical Device Management CMMS systems - Nuvolo or similar.
- Ideal: Experience in Hospital Med Device Management then shifted to IT Audit / Technology Risk Mgmt.
- Work remotely anywhere in Domestic US. Preferred locations Colorado or Georgia.
- COVID-19 Vaccine and Booster Required - OR must provide valid medical exemption from doctor in advance.
- Must be able to successfully pass a 12-panel drug screen, 10-year background check, employment verification.
- You will need to be a current US Citizen or valid Green Card holder. No need for visa now or in future. This role is not able to offer visa transfer or sponsorship now or in the future.
- W2 only - No sub vendors. Sponsorship NOT available.
- Must have direct contact information on resume (phone / email) to be considered.
- Work remotely anywhere in Domestic US. Preferred locations Colorado or Georgia.
- COVID-19 Vaccine and Booster Required - OR must provide valid medical exemption from doctor in advance.
- Must be able to successfully pass a 12-panel drug screen, 10-year background check, employment verification.
- You will need to be a current US Citizen or valid Green Card holder. No need for visa now or in future. This role is not able to offer visa transfer or sponsorship now or in the future.
- W2 only - No sub vendors. Sponsorship NOT available.
- Must have direct contact information on resume (phone / email) to be considered.
-
Boston, Massachusetts, United States ITmPowered, LLC Full timeAbout the Job: We are seeking a seasoned IT auditor with expertise in medical device cybersecurity to join our Technology Risk Management team. As a Sr. IT Auditor Consultant, you will be responsible for conducting comprehensive IT controls assessments for our Hospital Medical Device Cybersecurity Program.The ideal candidate will have a strong understanding...
-
Boston, Massachusetts, United States ITmPowered, LLC Full timeAbout the RoleThe Sr. IT Auditor Consultant will serve on behalf of the Technology Risk Management organization performing IT Controls Assessments for a set of 20 custom IT controls in this Hospital Medical Device Cybersecurity Program.Plan and perform full lifecycle audits (scope, plan, fieldwork, reporting) assessing Audit IT Controls Design prior to...
-
Boston, Massachusetts, United States ITmPowered, LLC Full timeJob DescriptionThe Sr. IT Auditor Consultant will be responsible for conducting IT Controls Assessments (IT Audits) of roughly 20 customized Medical Device cybersecurity IT Controls being implemented enterprise wide.Key Responsibilities:Conduct full IT Controls Risk Assessments on each of 20+ custom Med Device cybersecurity IT Controls twice.Scope and Plan...
-
Boston, Massachusetts, United States ITmPowered, LLC Full timeCompany OverviewITmPowered, LLC is a leading provider of IT consulting services to healthcare organizations.About the JobThe Sr. IT Auditor Consultant will play a key role in our Medical Device Cybersecurity program.Key Responsibilities:Conduct IT Controls Assessments (IT Audits) of roughly 20 customized Medical Device cybersecurity IT Controls being...
-
IT Controls and Compliance Specialist
2 days ago
Boston, Massachusetts, United States ITmPowered, LLC Full timeAbout Us: At ITmPowered, LLC, we understand the importance of protecting our clients' sensitive data and systems from cyber threats. That's why we're seeking a highly skilled IT auditor with expertise in medical device cybersecurity to join our Technology Risk Management team.As a Sr. IT Auditor Consultant, you will be responsible for conducting...
-
Medical Device Professional
2 days ago
Boston, Massachusetts, United States CosignMed Full timeCosignMed is currently seeking a dedicated Medical Device Professional to join our team. As a Clinical Specialist, you will play a crucial role in providing technical support to physicians and institutions in the New England Area.About the Position:We are looking for an individual with a Bachelor's Degree, RN, Physician Assistant or Certified Medical...
-
Medical Device Specialist
2 days ago
Boston, Massachusetts, United States Brigham and Women's Hospital Full timeJob SummaryThe Brigham and Women's Hospital is seeking a highly skilled Medical Device Specialist to join our team. As a key member of the Cardiac Support Service, you will be responsible for facilitating the care of patients with mechanical circulatory support devices and heart transplants. Your expertise will enable us to provide exceptional patient care...
-
Medical Device Specialist
2 days ago
Boston, Massachusetts, United States ConsignMed Full time**Company Overview:**Career Opportunities at ConsignMed.We are a leading medical device company seeking a highly skilled Clinical Specialist to join our team. In this role, you will provide expert clinical support and consultation services to physicians, institutions, and surgical staff in the New England area.Responsibilities:Provide technical support to...
-
Medical Device Technician
6 days ago
Boston, Massachusetts, United States Outset Medical Full timeCompany OverviewOutset Medical is a pioneering medical device company that revolutionizes the field of dialysis by streamlining complexity and cost, giving patients better care now.We change lives by creating groundbreaking technology for reducing the cost and complexity of dialysis. Our Tablo Hemodialysis System is FDA cleared for use across care settings,...
-
Toxicology Expert for Medical Devices
5 days ago
Boston, Massachusetts, United States Geosyntec Consultants Full timeCompany Overview: Geosyntec Consultants is a leading environmental and health risk sciences consulting firm. We specialize in providing expert services to clients in various industries, including medical devices.Job Description: As a Senior Medical Device Toxicologist, you will be responsible for assisting colleagues and clients in toxicological risk...
-
Boston, Massachusetts, United States Real Staffing Full time**R&D Team Member Wanted:**We need a skilled Sr. Embedded Software Engineer to join our team in the Greater Boston area, focusing on developing real-time embedded software for medical devices.Main tasks will include coding in C/C++, working with microcontrollers, and collaborating with cross-functional teams.Requirements:Bachelor's degree in Engineering or...
-
Medical Device Biocompatibility Expert
5 days ago
Boston, Massachusetts, United States Geosyntec Consultants Full timeAbout Geosyntec ConsultantsWe are a premier environmental and health risk sciences consulting firm, offering expertise in environmental sciences, human and ecological risk sciences, product stewardship, and life sciences. Our scientists have diverse backgrounds in chemistry, engineering, toxicology, epidemiology, ecotoxicology, medical device and...
-
Senior Medical Device Toxicologist
5 days ago
Boston, Massachusetts, United States Geosyntec Consultants Full timeOverview Gradient, a Geosyntec Company, is seeking a Senior Medical Device Toxicologist to assist colleagues and clients in toxicological risk assessments and biological safety evaluations for medical devices. You will have the opportunity to join our growing practice in one of our office locations: downtown Boston, MA or Charlottesville, VA.Gradient is an...
-
Medical Device Specialist
4 days ago
Boston, Massachusetts, United States CosignMed Full timeCosignMed seeks highly skilled professionals to support our clinical operations in the New England Area.We are looking for a Clinical Specialist to cover surgical procedures, provide technical support, and maintain strong relationships with physicians and institutions.Responsibilities include:Providing case coverage in the New England Area, covering Men's...
-
Senior Medical Device Toxicologist
6 days ago
Boston, Massachusetts, United States Gradient Full timeJob Description Job Description Gradient, a Geosyntec Company, is seeking a Senior Medical Device Toxicologist to assist colleagues and clients in toxicological risk assessments and biological safety evaluations for medical devices. You will have the opportunity to join our growing practice in one of our office locations: downtown Boston, MA or...
-
Senior IT Auditor
3 days ago
Boston, Massachusetts, United States ProPivotal Full timeSenior IT Auditor - Exciting Opportunity inGlobal Audits What's in it for you: $130k-$150kannual salary range Collaborativeteam and strong work-life balance Exposureto global markets and industries Responsibilities: Lead or participate in audits of subsidiaries, business units, and special projects Develop risk and control matrices, document...
-
Medical Device Safety Specialist
5 days ago
Boston, Massachusetts, United States Geosyntec Consultants Full timeAbout Our Team: At Geosyntec Consultants, we pride ourselves on being a collaborative and dynamic team. Our employees are passionate about delivering exceptional results and making a positive impact on the world.Job Brief: We are seeking a highly skilled Senior Medical Device Toxicologist to join our team. The ideal candidate will have extensive experience...
-
Data Governance Sr. Dev or Tech Lead
4 days ago
Boston, Massachusetts, United States Georgia IT Inc Full timeData Governance Sr. Dev or Tech Lead Location - Boston, MA (Onsite) Rate - DOE Start Date - Immediately US Citizen, Green card holder, H4 EAD, GC EAD and H1B can apply. Job DescriptionOverall Data Governance experience Data Archival Data Anonymization Data Privacy, Right to forget, GDPR Hands on implementation capabilities Develop and implement a data...
-
Global Medical Device Registrar
4 hours ago
Boston, Massachusetts, United States Venus Aesthetic Intelligence Full timeWe are looking for a skilled Regulatory Affairs Associate to join our team at Venus Aesthetic Intelligence.In this role, you will execute regulatory strategies, prepare and submit regulatory documents, and provide guidance and support to cross-functional teams on regulatory matters.About the Role:As a Regulatory Affairs Associate, you will be responsible for...
-
Auditor Expert
1 day ago
Boston, Massachusetts, United States Manulife Full timeThe role of Senior Technology Auditor at Manulife involves testing large, complex, and sensitive engagements. This encompasses advisory and assurance functions such as key risk audits, SOX, consulting, Issue, and Corrective Action Plan assessments. The position requires delivering high-quality, efficient, valuable, and risk-based audit services connected to...
