Manager - Institution Security Officer (Cluster Office)

Synapxe; Queenstown; On-site; NZD 120,000 - 150,000; Full time

Job summary

Synapxe is seeking a security professional to lead risk assessment, policy compliance, and incident management within healthcare cybersecurity. You will review ICT/OT/medical device risk, provide risk opinions, and guide remediation priorities.

This two‑year direct contract role emphasizes regulatory alignment and robust security controls across enterprise platforms. The role requires detailed knowledge of healthcare cybersecurity, ICT/OT/medical device domains, and related certifications is

Qualifications

• 6-8+ years in IT, Information Security, or IT Audit.
• 4+ years in cybersecurity, preferably healthcare or regulated industries.
• Knowledge of ICT, OT and Medical Device cybersecurity.
• InfoSec concepts spanning infrastructure and application domains.
• Certifications such as CISSP, CCSP, CISA, CISM, CRISC preferred.

Responsibilities

• Review risk assessments for ICT, OT, and medical devices per the framework and policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate risk remediation priorities based on findings.
• Ensure consistency across risk recommendations balancing operations and cybersecurity.

Skills

IT Security

Risk Assessment

Policy Compliance

Incident Management

Healthcare cybersecurity

Job description

Company description:

Synapxe is the national HealthTech agency inspiring tomorrow's health. The nexus of HealthTech, we connect people and systems to power a healthier Singapore. Together with partners, we create intelligent technological solutions to improve the health of millions of people every day, everywhere. Reimagine the future of health together with us at www.synapxe.sg

Job description:

Role & Responsibilities

Risk Assessment

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Policy Compliance

• Support security compliance program by assessing and validating adherence to policy requirements.
• Track all policy deviations and ensure timely renewal, implementation of mitigation plans, and eventual closure of each deviation.

Cybersecurity Incident Management

• Support the institution's incident response activities by assessing and classifying security incidents, initiating appropriate response actions, conducting impact assessments, containing and eradicating threats, coordinating recovery efforts, and performing post-incident investigations

Other cybersecurity activities

• Cybersecurity awareness initiatives, audit support, and security activities associated with key system migrations, including Windows migrations and system go‑live events.

Requirements

• At least 6-8 years of experience in IT, Information Security, or IT Audit.
• At least 4 years of experience in cybersecurity, preferably in healthcare or other regulated industries.
• Knowledge of ICT, Operational Technology and Medical Device cybersecurity.
• Experience with Information and Cybersecurity concepts spanning infrastructure and application domains.
• Cybersecurity related certifications such as CISSP, CCSP, CISA, CISM, CRISC is preferred.

This is a 2 year Direct Contract role.