Cybersecurity Engineer

Company Overview

At Harrison.ai, we are revolutionizing healthcare by creating AI-powered diagnostic tools to assist clinicians in making quicker, more accurate diagnoses, ultimately improving care for millions globally. Our bold mission is to enhance global healthcare capacity and make healthcare more equitable. Through AI as a clinician co-pilot, we address critical shortages of expertise and ensure timely, high-quality care for all patients, regardless of location.

Role Summary

We seek a Cybersecurity Engineer to play a pivotal role in strengthening the security framework of our regulated, sensitive software products that impact patients’ wellbeing. This position spans Cybersecurity Governance, Risk & Compliance (GRC), operational security tasks, and product-related security activities, ensuring dynamic and varied responsibilities. The role collaborates closely with engineering, product, IT, privacy, and legal departments and reports to the Head of Compliance & RAQA, with direct access to the CEO for strategic involvement.

Key Responsibilities

• Manage and uphold the Information Security Management System (ISMS), ensuring continual compliance with ISO 27001, GDPR, HIPAA, and relevant standards.
• Conduct cybersecurity assessments and audits, lead risk triage, and collaborate with engineering teams to remediate vulnerabilities.
• Develop and maintain cybersecurity policies, procedures, and governance documentation.
• Support cybersecurity operations alongside IT, including configuration and management of security tools such as firewalls, networking devices, endpoint protections, and SIEM platforms.
• Respond to security questionnaires and facilitate third-party security evaluations during bids and tenders.
• Promote a security-first culture by implementing awareness campaigns, organizing training sessions, and embedding security-by-design principles into team processes.
• Assist in data security and governance initiatives across the organization.
• Demonstrate progressive use of AI by integrating AI-powered automations within IT and operational workflows.

Required Qualifications and Experience

• Bachelor’s degree in Engineering, Science, Information Systems or equivalent 5+ years managing security programs in Information Security, Network Engineering, or System Administration.
• Solid technical expertise in at least one domain: Security Operations Center (SOC), networking, systems administration, or software development, capable of advising engineering teams credibly on security matters.
• Direct experience maintaining ISMS aligned with ISO 27001, including audit participation and controls documentation.
• Hands-on involvement with GRC tasks such as risk assessments, policy creation, control frameworks, and compliance monitoring.
• Certification in one or more security qualifications like CISA, CISM, CISSP, SANS, BSI or equivalents.
• Excellent communication skills to effectively translate technical security risks to varied stakeholders.

Preferred Skills and Attributes

• Background in regulated software sectors such as healthcare SaaS, medical devices, avionics, or automotive, familiar with product security requirements like IEC 81001-5-1 and ISO 14971 cybersecurity applications.
• Experience or knowledge of AI-centric security governance, frameworks including ISO 42001, NIST AI RMF, or regulatory understanding like the EU AI Act.
• Familiarity with quality management standards like ISO 13485 and ISO 9001 and how these intersect with ISMS controls.
• Proficiency with enterprise security tools such as CrowdStrike, CATO Networks, Mimecast, BeyondTrust and AIM Security.
• Experience handling enterprise security questionaries and third-party vetting platforms (e.g., Drata, Vanta, OneTrust, UpGuard).
• Cloud security expertise including relevant certifications.

Employee Benefits and Culture

• Opportunity to innovate and impact global healthcare positively through cutting-edge AI technology.
• Collaborative and diverse international team environment fostering trust, autonomy and effective teamwork.
• Support from leading investors with significant funding to boost global healthcare outreach.
• Access to professional development budgets, mentoring, hackathons, secondments, and a clear growth path.
• Flexible working arrangements including work-from-home options and flexible hours.
• Comprehensive family support programs covering fertility, parenthood, loss, and grandparenthood.

Equal Opportunity Commitment

We proudly embrace diversity and inclusion, welcoming candidates from diverse backgrounds to enhance our culture and innovation. Our commitment is to build teams that mirror a broad range of perspectives and skills.