System Administrator (ISO27001 Operations) (BDH)

A*STAR RESEARCH ENTITIES; Singapore; On-site; SGD 60,000 - 80,000; Full time

Job summary

A leading research institute in Singapore is seeking a System Administrator for ISO27001/27017 operations. The successful candidate will ensure the secure operation of IT systems, maintain compliance with ISO standards, and support biomedical research initiatives. A strong background in system administration, particularly in regulated environments, along with expertise in ISO27001 and Linux systems, is essential. This role involves monitoring systems, managing user access, and providing technical support.

Qualifications

• Bachelor's degree or equivalent in Computer Science, Engineering, or Information Security.
• 4+ years of experience in system administration in regulated environments.
• Strong understanding of ISO27001 and related standards.

Responsibilities

• Implement and maintain ISO27001/17-compliant controls.
• Administer server hardware and virtualisation platforms.
• Manage onboarding and training procedures for system users.

Skills

System administration

ISO27001 knowledge

Linux/Unix experience

Network security

Documentation skills

Education

Bachelor's degree in Computer Science or related field

Tools

OpenShift

ProxMox

Job description

The Biomedical Data Hub (BDH) curates and maintains strategic deidentified health data cohorts and supports researchers and innovators with expertise in bioinformatics and A.I. Its mission is to act as a trusted research node that unlocks the value of digital health data to support cutting edge science and digital health solutions that will benefit Singapore and Singaporeans. BDH is a national platform hosted by the Agency for Science Technology and Research (A*STAR) in partnership with Ministry of Health (MOH) Singapore and is funded by Singapore's National Research Foundation (NRF).

As the System Administrator – ISO27001/27017 Operations you will be responsible for the secure and compliant operation of IT systems supporting biomedical research and data analytics platforms. This role ensures alignment with ISO/IEC 27001, ISO/IEC 38505 and related standards, supporting infrastructure, user access, and audit readiness across the BDH stack.

In this role you'll work at the intersection of cybersecurity, research IT, and data governance, growing expertise in high-demand areas like ISO27001, secure cloud operations, and biomedical data protection. You’ll gain exposure to cutting edge use cases in data governance and analysis balancing the need to support impactful biomedical research with protecting data entrusted to us by patients and researchers.

Responsibilities

Security & Compliance

• Implement and maintain ISO27001/17-compliant controls including access rights, cryptography, and policies.
• Support management review and audit schedules for ISO27001 and ISO38505 audits.
• Maintain ISMS documentation and contribute to internal and external audit processes.

System Operations

• Administer server hardware, virtualisation platforms (e.g., OpenShift, ProxMox), and network infrastructure.
• Monitor system performance and ensure high availability and disaster recovery readiness.

User & Access Management

• Manage onboarding, training, and exit procedures for system users in alignment with ISMS protocols.
• Maintain access control logs and respond to access-related incidents.

Risk Management & Data Governance

• Participate in IT risk assessments for internal systems and SaaS platforms.
• Support data governance by mapping system purposes to data classifications and validating controls for each tier.

Collaboration & Support

• Work closely with HR, IT, and research teams to support joint appointments and secondments involving system access.
• Provide technical support and guidance to users and stakeholders.

Requirements

• Bachelor's degree in Computer Science, Engineering, Information Security, or related field (or equivalent professional certifications + experience).
• Minimum 4 years of experience in system administration, preferably in regulated environments such as research, healthcare or ISO27001-certified organisations.
• Strong understanding of ISO27001 and related standards.
• Experience with Linux/Unix systems, virtualisation platforms, and network security.
• Excellent documentation and communication skills.