Cybersecurity Manager

Role Overview

The Cybersecurity Manager will oversee daily cybersecurity operations and implement security controls within IT and digital healthcare settings. This position demands extensive cybersecurity expertise, hands-on technical skills, and thorough knowledge of healthcare systems and sensitive medical data.

Key Responsibilities

• Manage and operate cybersecurity controls on a daily basis.
• Monitor Security Operations Center (SOC), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), vulnerability management, multi-factor authentication (MFA), and access control activities for endpoints and networks.
• Identify cybersecurity vulnerabilities and risks, coordinate evaluation and subsequent remediation efforts.
• Lead security incident handling including investigation, escalation, and resolution phases.
• Develop, enforce, and update cybersecurity policies, procedures, and technical safeguards.
• Assist with compliance tasks, supporting audits related to NCA ECC, PDPL, ISO 27001, and healthcare regulations.
• Review periodically the security posture of Hospital Information Systems (HIS), Electronic Medical Records (EMR), cloud platforms, applications, system integrations, and medical devices.
• Evaluate security implications of technological changes, projects, and third-party solutions through assessments.
• Oversee user access assessments, privileged account management, and security setting validations.
• Coordinate penetration testing, vulnerability scans, and manage associated remediation with both internal and external teams.
• Maintain thorough records including cybersecurity documentation, risk registers, incident logs, and compliance evidence.
• Provide ongoing cybersecurity training and awareness to IT and business units.

Candidate Requirements

• A bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related discipline is required.
• Possess 5 to 7 years of practical cybersecurity experience, ideally within the healthcare sector.
• Demonstrated working knowledge in Security Operations Center (SOC) functions, Identity and Access Management (IAM), vulnerability management, and network/cloud security.
• Familiarity with endpoint security, incident response processes, and governance, risk, compliance frameworks.
• Strong understanding of healthcare systems such as EMR and HIS, including patient data management, integrations, and medical device environments.
• Knowledgeable about regulatory frameworks including NCA ECC and PDPL, with mandatory proficiency in ISO 27001 standards.
• Certifications like Security+, CySA+, CEH, CISM, or CISSP will be considered an advantage.