Group Chief Information Security Officer (NHG Health)

Synapxe; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

A healthcare IT organization in Singapore is seeking an experienced professional to lead their information security strategy. This role involves developing comprehensive security measures, managing risks, and fostering security awareness among staff. Candidates should be adept at integrating security practices across departments and advising on compliance with standards. Experience in managing security incidents and a proactive approach to emerging threats is essential.

Responsibilities

• Develop and implement an information security strategy aligning with organizational goals.
• Lead and support the information security team fostering security awareness.
• Conduct risk assessments and manage security incidents.
• Establish and update security policies and standards.
• Collaborate with departments to integrate security measures.
• Recommend controls for deviations from security policies.
• Monitor threats and technologies for risk mitigation.
• Provide IT security advisory services to project teams.
• Participate in C-level strategic initiatives beyond IT.

Job description

• Develop and implement a comprehensive information security strategy that aligns with the organization’s goals while ensuring compliance with public healthcare IT security policies and standards.
• Lead and support the information security team, fostering a culture of security awareness among IT staff and end users to keep them informed of security threats and appropriate responses.
• Conduct thorough risk assessments and manage security incidents, serving as the primary point of contact for all security-related activities and ensuring timely response and recovery.
• Establish, maintain, and regularly update security policies, standards, and procedures to safeguard the organization’s information assets and ensure compliance with relevant laws and regulations.
• Collaborate with IT and other departments to integrate security measures into all organizational operations, while conducting compliance checks for new projects and assessing their impact on the overall risk profile.
• Recommend and implement compensating controls for any deviations from established IT security policies and standards, continuously improving security practices across the organization.
• Monitor emerging threats and technologies, advising stakeholders on appropriate actions to mitigate risks and adapt the security strategy as necessary.
• Provide IT security advisory and consulting services to project teams ensuring that security considerations are integrated into all initiatives and projects.
• Participates and contributes as a member of Senior Management team at C-level, contributing to the organization’s overall strategic initiatives beyond just IT. on overall organisation’s initiatives, not limited to IT only.