Healthcare Cybersecurity Risk & Policy Manager

Synapxe; Queenstown; On-site; NZD 120,000 - 150,000; Full time

Job summary

Synapxe is seeking a security professional to lead risk assessment, policy compliance, and incident management within healthcare cybersecurity. You will review ICT/OT/medical device risk, provide risk opinions, and guide remediation priorities.

This two‑year direct contract role emphasizes regulatory alignment and robust security controls across enterprise platforms. The role requires detailed knowledge of healthcare cybersecurity, ICT/OT/medical device domains, and related certifications is

Qualifications

• 6-8+ years in IT, Information Security, or IT Audit.
• 4+ years in cybersecurity, preferably healthcare or regulated industries.
• Knowledge of ICT, OT and Medical Device cybersecurity.
• InfoSec concepts spanning infrastructure and application domains.
• Certifications such as CISSP, CCSP, CISA, CISM, CRISC preferred.

Responsibilities

• Review risk assessments for ICT, OT, and medical devices per the framework and policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate risk remediation priorities based on findings.
• Ensure consistency across risk recommendations balancing operations and cybersecurity.

Skills

IT Security

Risk Assessment

Policy Compliance

Incident Management

Healthcare cybersecurity

Job description

Synapxe is seeking a security professional to lead risk assessment, policy compliance, and incident management within healthcare cybersecurity. You will review ICT/OT/medical device risk, provide risk opinions, and guide remediation priorities.

This two‑year direct contract role emphasizes regulatory alignment and robust security controls across enterprise platforms. The role requires detailed knowledge of healthcare cybersecurity, ICT/OT/medical device domains, and related certifications is