Manager - Risk Assessment & Compliance (Cluster CISO Office)

Risk Assessment

• Review risk assessments for ICT, OT, and medical devices in accordance with the Healthcare Cybersecurity & Technology Risk Management Framework and IT Security Policies.
• Provide security risk opinions, advisories, and recommendations.
• Challenge and validate security risk remediation priorities based on identified risk findings.
• Ensure consistency across risk recommendations, balancing operational efficiency with cybersecurity requirements.

Policy Compliance

• Support security compliance program by assessing and validating adherence to policy requirements.
• Track all policy deviations and ensure timely renewal, implementation of mitigation plans, and eventual closure of each deviation.

Cybersecurity Incident Management

• Support the institution’s incident response activities by assessing and classifying security incidents, initiating appropriate response actions, conducting impact assessments, containing and eradicating threats, coordinating recovery efforts, and performing post‑incident investigations

Other cybersecurity activities

• Cybersecurity awareness initiatives, audit support, and security activities associated with key system migrations, including Windows migrations and system go‑live events.