The Information Security Specialist is a strategic role within DeepHealth’s Quality, Regulatory, and Compliance department, responsible for assisting in the development, implementation, and maintenance of comprehensive information security compliance strategies. This position is critical in protecting organizational data, ensuring regulatory adherence, and mitigating potential security risks in the complex digital health landscape.Job requirementsDuties and Responsibilities As the Information Security Specialist, this position will work with the Information Security Officer, IT Operations, Sec Operations and the broader Compliance team to:Information Security Compliance Strategy:Develop and implement holistic security compliance programsCreate comprehensive risk management frameworksDesign and maintain security policies, procedures, and guidelinesContinuously assess and update security strategiesEnsure alignment with organizational objectives and regulatory requirementsRegulatory Compliance:Ensure compliance with complex regulatory standards including, but not limited to:HIPAAGDPRCCPAISO 27001HITRUSTConduct thorough risk assessments and vulnerability evaluationsPrepare detailed compliance reports and documentationSupport external and internal audit processesTrack and implement regulatory changesTechnical Security:Perform comprehensive security vulnerability assessmentDevelop and implement security control frameworksMonitor and analyze security incidents and breachesDesign and conduct security awareness training programsManage access control and identity management systemsEvaluate and recommend security technologies and solutionsIncident Response and Management:Develop and maintain incident response plansCoordinate rapid and effective responses to security incidentsConduct pos-incident analysis and implement preventive measuresMaintain detailed incident documentation and reportingInterdepartmental Collaboration:Work closely with IT, Legal, Compliance, and Clinical teamsProvide security guidance and recommendationsFacilitate cross-functional security awareness and trainingSupport technology implementation and security best practicesPlease Note: This is not an exhaustive list of all duties, responsibilities and requirements of the position described above. Other functions may be assigned, and management retains the right to add or change duties at any time.Qualifications include:Qualifications include:Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (or equivalent experience). Master’s degree or advanced security certifications preferred, such as:CISSP (Certified Information Systems Security Professional)CISM (Certified Information Security Manager)CRISC (Certified in Risk and Information Systems Control)3-5 years of progressive experience in security compliance with healthcare, medical technology, or highly regulated industries.Proven track record of developing and implementing security strategies.Experience with regulatory compliance in complex environments, including:An advanced understanding of security frameworks and compliance standardsProficiency in security tools and technologiesExperience with risk assessment and management toolsExcellent written and oral communication and interpersonal skills with the ability to explain complex security concepts to diverse audiences.High level of integrity and confidentialityWorking conditionsThis position may be based in the European Union in a typical office setting.This position will have the ability to work remotely.Physical requirementsThis position often requires sitting, standing, walking, bending, twisting, reaching with hands and arms, using hands and fingers, handling, or feeling, speaking, listening, and high-level cognitive thinking. Also, must be able to lift up to 10 pounds occasionally. The position requires the ability to travel (~10% of time), drive a vehicle, and utilize other forms of transportation.ACCOMMODATIONSReasonable accommodations may be made to enable people with disabilities to perform the essential functions of the job.Salary Range:€65,000 - €75,000 EUR Annually£55,000 - £65,000 GBP Annually
2 days ago