It Security And Compliance Manager

Heena Dogra; Zirakpur; On-site; INR 1,800,000 - 2,700,000; Full time

Job summary

HIIMS is seeking an Information Security and Compliance Leader to oversee information security governance and data protection across all HIIMS hospitals in alignment with NABH, ISO/IEC 27001, and the DPDP Act, 2023.

The role focuses on protecting patient data, clinical systems, and ensuring audit readiness across the hospital chain, with responsibilities spanning access control, ITGC, and incident management.

Qualifications

• Bachelor's degree in IT / Computer Science / Information Security.
• 6–10 years of experience in IT security, compliance, or IT audit.
• 3+ years experience in healthcare or hospital environments.
• Experience with NABH and ISO 27001 audits preferred.

Responsibilities

• Implement and maintain ISMS as per ISO/IEC 27001.
• Ensure NABH IMS and patient data confidentiality compliance.
• Ensure DPDP Act compliance including lawful processing, data security safeguards, and breach response.
• Govern access control, user access reviews, and privileged access management.
• Oversee IT General Controls: access, change management, backups, DR & BCP.
• Support internal, statutory, NABH, ISO, and ITGC audits.
• Manage security incidents and vendor security assessments.
• Conduct IT security and data privacy awareness programs.

Skills

Information security

Compliance

IT audit

Data protection

Education

Bachelor's degree in IT/CS/Information Security

Job description

Job Summary

Responsible for governing information security, IT compliance, and data protection across all HIIMS

hospitals in alignment with NABH standards, ISO/IEC 27001, and the Digital Personal Data Protection (DPDP) Act, 2023. The role ensures protection of patient data, clinical systems, and audit readiness

across the hospital chain.

Key Responsibilities

• Implement and maintain ISMS as per ISO/IEC 27001
• Ensure NABH Information Management System (IMS) and patient data confidentiality compliance
• Ensure DPDP Act compliance including lawful processing, data security safeguards, and breach

response

• Govern access control, user access reviews, and privileged access management
• Oversee IT General Controls: access, change management, backups, DR & BCP
• Support internal, statutory, NABH, ISO, and ITGC audits
• Manage security incidents and vendor security assessments
• Conduct IT security and data privacy awareness programs

Qualifications & Experience

• Bachelors degree in IT / Computer Science / Information Security
• 6–10 years of experience in IT security, compliance, or IT audit
• 3+ years experience in healthcare or hospital environments
• Experience with NABH and ISO 27001 audits preferred