Senior / Manager / Assistant Manager (Health Info Protection Office)

Ministry of Health; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A governmental health agency in Singapore seeks a candidate to ensure compliance with health regulations and manage cybersecurity incidents. The role involves conducting audits, developing workflows, and engaging with stakeholders within a dynamic team environment. Applicants should have a background in IT or related fields and strong analytical skills.

Qualifications

• Experience in IT auditing or data privacy compliance would be an advantage.
• Prior experience in cybersecurity, health information sharing, and incident management is a plus.
• Ability to work under pressure with minimal supervision.

Responsibilities

• Conduct audits and identify vulnerabilities in compliance with regulations.
• Collaborate with policy teams to implement regulatory policies.
• Engage with stakeholders to understand risks and communicate requirements.

Skills

Knowledge of information security and data protection laws and regulations

Good analytical, written and communication skills

Good people management and leadership skills

Education

Tertiary education in Information Technology, Computer Science, or a related field

Tools

CISSP

CISM

CISA

Job description

What the role is:

You will play an important role in evolving the MOH, Health Regulation Group (HRG)’s anticipatory and participatory regulatory approach to ensure patient safety and welfare in Singapore’s healthcare landscape. As part of the team under the Aged & Ancillary Service Regulations & Transformation Division (AART), you will develop and implement advisories, guidance, and other regulatory tools to enable health transformation, to achieve a more efficient and effective health regulatory regime, in particular the upcoming Health Information Bill (HIB).Broadly, the HIB is intended to support contribution of selected health data to the National Electronic Health Record (NEHR) and puts in place requirements for healthcare providers to meet requisite cybersecurity and data security requirements.Specifically, the role involves ensuring healthcare organisations comply with the regulatory requirements under the HIB such as through inspections, audits and complaints management, as well as managing cybersecurity incidents and health information breaches that are reported to MOH. The role will also involve close collaboration with teams leading our systems development and analytics framework, enforcement, as well as interactions with our Chief Medical Informatics Officer's Office and relevant policy teams from the Infocomm Technology and Data Group.This supports the establishment of an efficient and effective health information regulatory regime.The shortlisted candidates will be appointed to support one of the following key functions in Health Information Protection Office:• Health Information & Cyber Compliance• Health Information Incident ManagementYou will be working in a fast-paced and dynamic environment that would require the ability to manage multiple priorities and stakeholders at the same time.

What you will be working on:

This role involves conducting audits, identifying vulnerabilities, and making recommendations to ensure that cyber and data security protocols comply with prevailing regulations. This would include:• Collaborating with relevant policy teams and government agencies to translate regulatory policies to effective implementation plans and manage the execution of these plans;• Developing workflows, processes, and systems for implementation of new regulations;• Identifying and proposing suitable solutions to better streamline regulatory activities to achieve greater efficiency, and to see through its implementation.• Supporting the development of advisories and guidelines to improve regulated entities’ compliance to regulatory requirements;• Engaging stakeholders and healthcare organisations to communicate regulatory requirements, understand industry risks and review regulatory strategies.• Triaging, classification, referral and escalation of reported cybersecurity incidents and health information breaches, including coordination with relevant MOH, PDPC and CSA teams (where required).

What we are looking for:

• Tertiary education in Information Technology, Computer Science, or a related field.• Knowledge of information security and data protection laws and regulations• Possession of industry recognized credential such as CISSP, CISM, CISA, CIPT or similar certification would be an advantage.• Experience in IT auditing or data privacy compliance would be an advantage.• Working experience in healthcare setting would be an advantage• Good analytical, written and communications skills• Good people management, leadership and engagement skills• Ability to work under pressure and minimal supervision.• Ability to work independently and in a Team• Possess high standards of professionalism, personal discipline and integrity.• Ability to meet timelines and produce high quality work within the stipulated timelines• Prior experience in cybersecurity, health information sharing, National Electronic Health Record (NEHR), and/or incident management and response would be an advantage• Prior experience in stakeholder management or in partnerships / account management would be an advantage.Ideal candidate should also possess the following key competencies:• Thinking Clearly & Making Sound Judgements – Strong analytical and critical thinking abilities to support the crafting of sound policy recommendations; ability to grasp timelines, operating context and ground realities.• Learning & Putting Skills into Action - Possesses the drive and curiosity to learn and apply new skills, knowledge and new ways of working.• Improving & Innovating – Ability to seek continual improvements, and to innovate and experiment while managing the risks involved.• Working Effectively with Stakeholders – Ability to mobilize and rally partners and stakeholders towards a collective purpose.As part of the shortlisting process for this role, candidates may be required to complete a medical declaration and/or undergo further assessment.)

About Ministry of Health

The Ministry of Health’s (MOH) vision is to champion a healthy nation with our people – to live well, live long and with peace of mind. As an open country constantly exposed to an interconnected world, Singapore faces complex issues in public healthcare. MOH constantly grapples with new challenges brought on by an increasingly globalised world, a rapidly ageing population and rising expectations. MOH’s responses to these challenges include preventing and managing the outbreak of diseases such as SARS and Influenza A (H1N1), designing a healthcare system that delivers care in an integrated and effective manner, growing the capacity and capabilities within the sector, and managing healthcare inflation.As an MOH officer, you will be involved in formulating and implementing policies that guide Singapore’s healthcare ecosystem. You will work alongside a team with varied skills and backgrounds, but with the common goals of (i) promoting good health and reducing illnesses; (ii) ensuring that Singaporeans have access to good and affordable healthcare; and (iii) pursuing medical excellence. Your work will have far-reaching impact on the health and lives of Singaporeans.