HTM Associate Information Security Engineer

We are seeking a motivated and technically skilled Associate Information Security Engineer to join our Healthcare Technology Management (HTM) cybersecurity team in Eau Claire, Wisconsin. This role combines healthcare technology, networking, and cybersecurity to support the secure implementation and ongoing protection of medical, research, laboratory, and operational technologies. The ideal candidate will support secure network onboarding, implement identified security controls, mitigate cybersecurity risks and vulnerabilities, and collaborate with HTM, Information Security, IT, clinical teams, manufacturers, and vendors throughout the technology lifecycle. The HTM Associate Information Security Engineer position requires a Healthcare Technology Management (HTM) and/or Information Security professional who is result oriented, multi-disciplined, and comfortable in implementing system security solutions in multi-vendor environments. This position is responsible for the research and configuration of systems and procedures to ensure the protection of information processed, stored, or transmitted in Mayo Clinic's healthcare/operational technology environments. This position provides basic security deployment and/or consultation for various projects and initiatives. The incumbent also assists system users relative to medical, research, lab, and operational system security matters and undertakes projects requiring specialized technical knowledge. This position receives guidance from HTM leadership and other HTM Information Security Engineers/Analysts. Specific Job Responsibilities

• Support secure network onboarding of medical, research, laboratory, and operational technologies, including evaluation of connectivity requirements and implementation of required security controls.
• Interpret security requirements, risk assessment results, and technical information to determine and implement appropriate security configurations and controls.
• Investigate and mitigate identified vulnerabilities and security findings through patching, configuration changes, compensating controls, or other appropriate measures.
• Collaborate with HTM, OIS, IT, clinical teams, manufacturers, and vendors to implement security solutions while maintaining device functionality and clinical operations.
• Support ongoing cybersecurity activities throughout the technology lifecycle, including system changes, upgrades, vulnerability remediation, and security improvements.
• Document security configurations, implemented controls, mitigation activities, and technical outcomes.

Bachelors or Associates degree in Biomedical Electronics, Computer Science, Information Systems, Clinical Engineering or related major and at least 1 year experience with medical, research, lab, or operational equipment service or 1 year of information security experience. This individual will have basic experience with security analysis for medical, research, lab, and operational systems and networks. Basic understanding of security concepts and controls for network, application and operating systems and work experience with logical access controls to ensure confidentiality, integrity and assurance of proprietary information. Basic knowledge of TCP/IP networking. This individual must present a professional image and possess excellent communication skills when dealing with staff, contractors and vendors. Responsibilities include serving as a security coach/mentor for clinical and HTM staff on an as needed basis. Demonstrated interpersonal skills including the ability to work effectively in a team environment and as a participant. Capacity to work independently and willingness to seek advice/assistance. Bachelor’s degree is preferred. Service experience with medical, research, lab and operational technologies is preferred. Certified as CISSP, GIAC, Security +, Network +, or security equivalent; or will obtain certification within 2 years of hire. Preferred Qualifications

• Strong technical troubleshooting, analytical, and problem-solving skills.
• Working knowledge of TCP/IP networking, operating systems, network connectivity, access controls, vulnerabilities, and cybersecurity controls.
• Ability to interpret security requirements and translate them into practical technical configurations and mitigation actions.
• Ability to balance cybersecurity controls with patient safety, clinical workflow, device functionality, and manufacturer requirements.
• Strong initiative, attention to detail, and ability to manage multiple technical assignments while developing increasing independence.

Authorization to work and remain in the United States, without necessity for Mayo Clinic sponsorships now, or in the future (for example, be a U.S. Citizen, national, or permanent resident, refugee, or asylee). Mayo Clinic does not participate in the F-1 STEM OPT extension program. During the selection process you may participate in an OnDemand (pre-recorded) interview that you can complete at your convenience. During the OnDemand interview, a question will appear on your screen, and you will have time to consider each question before responding. You will have the opportunity to re-record your answer to each question - Mayo Clinic will only see the final recording. The complete interview will be reviewed by a Mayo Clinic staff member and you will be notified of next steps.

Just as our reputation has spread beyond our Minnesota roots, so have our locations. Today, our employees are located at our three major campuses in Phoenix/Scottsdale, Arizona, Jacksonville, Florida, Rochester, Minnesota, and at Mayo Clinic Health System campuses throughout Midwestern communities, and at our international locations. Each Mayo Clinic location is a special place where our employees thrive in both their work and personal lives. Learn more about what each unique Mayo Clinic campus has to offer, and where your best fit is.

Equal Opportunity

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability status. Learn more about the "EOE is the Law". Mayo Clinic participates in E-Verify and may provide the Social Security Administration and, if necessary, the Department of Homeland Security with information from each new employee's Form I-9 to confirm work authorization.

Why Mayo Clinic

Mayo Clinic is top-ranked in more specialties than any other care provider according to U.S. News & World Report. As we work together to put the needs of the patient first, we are also dedicated to our employees, investing in competitive compensation and comprehensive benefit plans – to take care of you and your family, now and in the future. And with continuing education and advancement opportunities at every turn, you can build a long, successful career with Mayo Clinic.

Benefits Highlights

• Medical: Multiple plan options.
• Dental: Delta Dental or reimbursement account for flexible coverage.
• Vision: Affordable plan with national network.
• Pre-Tax Savings: HSA and FSAs for eligible expenses.
• Retirement: Competitive retirement package to secure your future.