Cybersecurity Consulting Lead

Reference #: 145584 Job Details Job Location Corporate Headquarters - Plymouth Meeting, PA Remote Type Hybrid Position Type Full Time Education Level Graduate Degree Preferred Travel Percentage 10% Job Shift Day Job Category Health Devices Description WHY CHOOSE ECRI? ECRI is an inspiring place to work. We share a common mission to help healthcare organizations make smart, compassionate, and ethical decisions for patients. Consider these additional benefits of joining the ECRI team: Industry leadership: We have a long history and proven reputation in patient safety and medical technology research. On-the-job-learning: You will have the opportunity to work with specialists across medical science, patient care, healthcare management, and technology. Comprehensive healthcare benefits: We offer medical, dental, vision, life insurance, accidental death and dismemberment, and disability coverage. Retirement Savings: Our employees can participate in an employer-matching 403(b) Retirement Savings Plan. Additional benefits: ECRI offers additional benefits to our employees, including paid time off and holiday pay, paid leave for parents, tuition assistance, employee assistance program, access to LinkedIn Learning, and other voluntary benefit programs (e.g. accident insurance, identify theft insurance, flexible spending accounts). Volunteer Program: ECRI Cares, our employee volunteer program, provides a framework for us to work together and make a difference in the lives of others. All employees are provided 16 hours annually of paid time to volunteer at preapproved ECRI Cares charities during normal business hours. ABOUT ECRI At ECRI, our passion for safe, effective, and efficient care is ingrained into the fabric of who we are and why we are here. For more than 50 years, the people of ECRI have been unyielding in their work to protect patients from unsafe and ineffective medical technologies and practices. Now, with the acquisition of the Institute for Safe Medication Practices (ISMP), we have created one of the largest healthcare quality and safety entities in the world. As a non-profit, independent organization, we utilize an unbiased, evidence-based approach to develop guidance, and maintain our principles of integrity and transparent work. Our ethical standards have led us to adopt the industry's strictest conflict-of-interest policies, and they are why tens of thousands of healthcare leaders worldwide rely on ECRI to guide their clinical, operational, and strategic decisions across all sites of care. The Most Trusted Voice in Healthcare ECRI is proud to serve the healthcare industry, from providers and insurers to government agencies, and medical associations. Our areas of focus include: Patient Safety: empowering leaders to eliminate patient harm through the dissemination of best practices, guidance, benchmarking, and recommendations. Evidence-Based Medicine: providing clinical evidence to inform and support decisions on the effectiveness of medical technologies, procedures, genetic tests, and clinical practice guidelines. Technology Decision Support: arming hospital systems with unbiased insights, so they can optimize their supply chain. ECRI is the only organization worldwide to conduct independent medical device evaluations, with labs located in North America and Asia Pacific. ECRI is designated an Evidence-based Practice Center by the U.S. Agency for Healthcare Research and Quality and a federally certified Patient Safety Organization by the U.S. Department of Health and Human Services. At ECRI, our passion for the truth drives us to go further and dig deeper in our pursuit to advance effective, evidence-based healthcare globally. The success of our organization relies on the kind of creative thinking that can only result from a diverse team of individuals. ECRI is proud to be an employer of choice with an inclusive environment for all employees. As par of this goal and in compliance with various laws and regulations, ECRI provides reasonable accommodation to applicants and employees. It's what makes ECRI unique, and why we are the most trusted voice in healthcare. POSITION SUMMARY To evaluate cybersecurity and interconnectivity of medical devices, provide technical consultation and risk assessment to the healthcare community based on current and future needs and trends, develop and execute risk assessment services, apply broad judgment and experience to multiple Device Safety activities. To participate in diverse ways, such as helping to plan new programs, selecting and training staff, and assisting in managing ongoing internal and external projects. To serve as a key information security expert within the Device Safety team. ESSENTIAL FUNCTIONS Reasonable Accommodation Statement: To accomplish this job successfully, an individual must be able to perform, with or without reasonable accommodation, each essential function satisfactory. Reasonable accommodations may be made to help enable qualified individuals with disabilities to perform the essential functions. Essential Functions: General: Supervise information security contractors in various activities related to penetration testing, security hazard and risk assessment, and other areas of healthcare consulting or product evaluation. Responsible for comparative testing and analysis of medical products, including development and completing laboratory tests, literature review, and providing final report for customers. Must be a leader who thinks strategically and has the long-range goal of excellence of Device Safety initiatives. Must remain current with technological and regulatory developments and trends within field of cybersecurity, networking and risk assessment - serving as an expert in those fields. Must be able to conduct all projects and responsibilities with minimal supervision and at a principal level. Ability to manage and ensure secure ECRI laboratory network infrastructure in accordance with organization requirements and standards for cybersecurity segmentation to enable Device Safety information security initiatives is expected. Manages assigned projects to meet scheduled deadlines and updates supervisors on projects and problems on a regular basis. Participates in and manages multiple simultaneous activities in an effective, timely, and economic manner. Internally and externally present and discuss research findings in a variety of formats, including written, graphical, oral, and video. As assigned, assume leadership of major projects, and coordinate these activities with Device Safety Leadership. Must demonstrate independent thinking with a clear, logical line of reasoning; issues must be well thought out and clearly presented. Must recognize areas of concern and/or controversy, or in potential violation of ECRI's Code of Ethics, and bring these to the attention of appropriate ECRI staff with recommended solutions. Consultation: Develop and execute security risk assessment services programs for healthcare facilities, including site visits to the facility and preparation of a final report with conclusions, and presentation to facility leadership. Assist in business development efforts for incorporating incident response efforts with risk assessment recommendations for service offerings Provides verbal and written consultation to internal and external customers. Critically reviews technical materials from outside sources (e.g., project proposals, jour