Assistant Manager – Information Security
Summary
Assistant Manager of Information Security at a healthcare organization in Colombo: develops and enforces security policies, runs risk assessments, audits and penetration tests, manages firewalls/SIEM/IDS/IPS and endpoint security, ensures ISO 27001/GDPR/HIPAA compliance, and leads incident response and staff security training.
About Our Client
Our client is a well-established healthcare organization focused on delivering quality patient care through advanced medical technologies.
Job Overview
The Assistant Manager – Information Security will develop and implement security policies, manage cybersecurity risks, ensure regulatory compliance, and protect the organization's digital assets against cyber threats.
Key Responsibilities
- Develop and enforce information security policies, procedures, and controls.
- Ensure compliance with ISO 27001, GDPR, PDPA, HIPAA, and other applicable regulations.
- Conduct security risk assessments, audits, penetration testing, and vulnerability assessments.
- Monitor threat intelligence and emerging cybersecurity risks.
- Review and manage firewalls, IDS/IPS, network security, and endpoint protection.
- Implement encryption, access controls, Data Loss Prevention (DLP), and endpoint security solutions.
- Investigate security incidents and coordinate forensic analysis with IT and legal teams.
- Lead incident response during cybersecurity breaches and attacks.
- Conduct staff training on cybersecurity best practices, compliance, and phishing prevention.
- Provide guidance on information security practices across the organization.
Qualifications & Requirements
- Bachelor's Degree in Cybersecurity, Information Technology, or a related field.
- Minimum 3 years of experience in information security, IT risk management, or compliance.
- Certifications such as CISSP, CISM, CEH, ISO 27001 Lead Auditor, or Security+ are preferred.
- Expertise in firewalls, SIEM tools, IDS/IPS, endpoint security, and threat intelligence.
- Experience in incident response, penetration testing, and risk assessment methodologies.
- Strong analytical, problem-solving, and communication skills.
- Willingness to work collaboratively with internal and external stakeholders.
Interested candidates may send their CV to jobs@mindplus.global.