Assistant Manager – Information Security

About Our Client

Our client is a well-established healthcare organization focused on delivering quality patient care through advanced medical technologies.

Job Overview

The Assistant Manager – Information Security will develop and implement security policies, manage cybersecurity risks, ensure regulatory compliance, and protect the organization's digital assets against cyber threats.

Key Responsibilities

• Develop and enforce information security policies, procedures, and controls.
• Ensure compliance with ISO 27001, GDPR, PDPA, HIPAA, and other applicable regulations.
• Conduct security risk assessments, audits, penetration testing, and vulnerability assessments.
• Monitor threat intelligence and emerging cybersecurity risks.
• Review and manage firewalls, IDS/IPS, network security, and endpoint protection.
• Implement encryption, access controls, Data Loss Prevention (DLP), and endpoint security solutions.
• Investigate security incidents and coordinate forensic analysis with IT and legal teams.
• Lead incident response during cybersecurity breaches and attacks.
• Conduct staff training on cybersecurity best practices, compliance, and phishing prevention.
• Provide guidance on information security practices across the organization.

Qualifications & Requirements

• Bachelor's Degree in Cybersecurity, Information Technology, or a related field.
• Minimum 3 years of experience in information security, IT risk management, or compliance.
• Certifications such as CISSP, CISM, CEH, ISO 27001 Lead Auditor, or Security+ are preferred.
• Expertise in firewalls, SIEM tools, IDS/IPS, endpoint security, and threat intelligence.
• Experience in incident response, penetration testing, and risk assessment methodologies.
• Strong analytical, problem-solving, and communication skills.
• Willingness to work collaboratively with internal and external stakeholders.

Interested candidates may send their CV to [email protected].