Senior Analyst, Information Security and Governance

About the Organization

M42 offers a broad spectrum of healthcare services ranging from primary care to specialized advanced treatments. Utilizing state-of-the-art health technologies and precision medicine, M42 guarantees top-notch efficiency, effectiveness, and patient-focused outcomes. Operating globally with more than 480 facilities in 27 countries and a workforce exceeding 20,000 professionals, M42 is set to transform global healthcare.

Role Overview

This position holds a crucial responsibility in steering the company's security programs, safeguarding all information assets. The role requires designing sophisticated security frameworks, managing multifaceted security projects, and providing mentorship to junior security personnel. A deep expertise in information security and a thorough understanding of evolving cyber threats are essential.

Key Responsibilities

• Develop and implement comprehensive information security strategies and roadmaps aligned to organizational objectives.
• Conduct thorough risk assessments and vulnerability scans to detect and address complex security challenges, establishing risk management protocols.
• Manage the entire incident response lifecycle, including detection, analysis, containment, removal, recovery, and lessons learned; lead investigations of major incidents and liaise with external entities as required.
• Architect and deploy advanced security solutions to protect organizational information assets, ensuring security features are integrated within IT systems from design to deployment.
• Lead and mentor junior security team members, promoting ongoing learning and development.
• Ensure compliance with pertinent security standards and regulations such as GDPR, ISO 27001, and NIST; direct security audits and coordinate with third-party auditors.
• Assess and oversee security risks associated with third-party vendors and partners, implementing mitigation strategies.
• Lead efforts in threat intelligence to monitor emerging cyber threats and prepare proactive defense measures.
• Collaborate closely with the Chief Information Security Officer and executive leadership to communicate risks and align security initiatives with business goals.
• Drive innovation and continual advancement in security practices through research, adoption of new technologies, and process improvements.

Qualifications and Experience

• Holder of a Bachelor’s degree in Information Security, Computer Science, or a related discipline.
• Minimum of five years’ professional experience in the information security domain.
• Demonstrated experience in risk management, security operations, and reviewing security frameworks.
• Possession of at least one of the following certifications: CISSP, CISM, or CISA.
• Additional certifications such as CRISC or CCSP are considered highly advantageous.
• Strong communication skills, capable of conveying intricate security matters effectively to audiences without technical backgrounds.