Information Security Specialist

Responsibilities

• ▹Develop and implement holistic security compliance programs
• ▹Create comprehensive risk management frameworks
• ▹Design and maintain security policies, procedures and guidelines
• ▹Continuously assess and update security strategies
• ▹Ensure alignment with organizational objectives and regulatory requirements
• ▹Ensure compliance with complex regulatory standards including HIPAA, GDPR, CCPA, ISO 27001 and HITRUST
• ▹Conduct thorough risk assessments and vulnerability evaluations
• ▹Prepare detailed compliance reports and documentation
• ▹Support external and internal audit processes
• ▹Track and implement regulatory changes
• ▹Perform comprehensive security vulnerability assessments
• ▹Develop and implement security control frameworks
• ▹Monitor and analyze security incidents and breaches
• ▹Design and conduct security awareness training programs
• ▹Manage access control and identity management systems
• ▹Evaluate and recommend security technologies and solutions
• ▹Develop and maintain incident response plans
• ▹Coordinate rapid and effective responses to security incidents
• ▹Conduct post-incident analysis and implement preventive measures
• ▹Maintain detailed incident documentation and reporting
• ▹Work closely with IT, Legal, Compliance and Clinical teams, providing security guidance and supporting technology implementation and security best practices

Requirements

• ▹Bachelor's degree in Cybersecurity, Information Security, Computer Science or a related field (or equivalent experience)
• ▹3-5 years of progressive experience in security compliance with healthcare, medical technology or highly regulated industries
• ▹Proven track record of developing and implementing security strategies
• ▹Experience with regulatory compliance in complex environments
• ▹Advanced understanding of security frameworks and compliance standards
• ▹Proficiency in security tools and technologies
• ▹Experience with risk assessment and management tools
• ▹Excellent written and oral communication and interpersonal skills, able to explain complex security concepts to diverse audiences

Nice to have

• ▹Master's degree or advanced security certifications such as CISSP, CISM, CRISC

Soft skills

What we offer

• ▹Ability to work remotely
• ▹Salary range: 65,000-75,000 EUR annually or 55,000-65,000 GBP annually

About the company

DeepHealth operates in the digital health landscape; the Information Security Specialist sits in its Quality, Regulatory and Compliance department and works with the Information Security Officer, IT Operations and Sec Operations. The position is preferably based in the Netherlands or the UK, but working from most EU countries is possible.