Causes information security

Causes information security

Your role in helping us to achieve our mission
As information security commander, you are responsible for improving and managing safety management systems that need to meet IE IE 27001 requirements, Hitrust. You can identify weaknesses and work with our products and technology teams, to solve them while ensuring the statute and our data remains safe. To be successful as the information security leadership, you are an expert in analytical skills and you have an in -depth knowledge of best practices to prevent a wide range of security threats. Moreover, you are an excellent connected and are able to train and educate our employees on various information security topics.

Responsibilities
Our platform is sclerotic by conducting information security risk assessments and compliance assessments of the internal operations of the internal devices of Sidekick Health, products, and third -party systems to ensure compliance with industry standards and internal information security policies.
Cooperation with management and products teams to improve security.
Delivery and promotion of the rules of Sidekick Health Company related to information security, and educate colleagues about best practices for information security.
– Keeping up developments in the standards of information technology security, threats and development in the artificial intelligence zone.
Supervising the hacking tests to find any defects.
– Control, evaluate and promote security controls constantly to adapt to advanced electronic threats and technological changes.
Documenting any security violations and evaluating their damages.
Coordination of activities related to information security (such as internal audits, external audit preparations) in their field of responsibility.

It must be
Holds a computer science certificate or a field related to technology.
You have 3-5 years of experience in a similar role.
-Book and excellent communication skills and the ability to communicate complex security concepts to artistic and non -artistic masses.
Experience in conducting information security risk assessments.
– Experience with safety frameworks/standards (such as NIST CSF, ISO 27K Family, BSI, etc.).
Practical experience with compliance and organizational assessments.
Knowledge/a good understanding of the most common data security and privacy regulations (for example, GDP).
– Knowledge of the concepts and techniques of cloud (for example, infrastructure as a symbol, structure without a servant, etc.)
Excellent written and oral skills in English.
A strong commitment to self -development, especially in cybersecurity, Devsecops and data privacy.
Be modest, but driven and designed and you have a mentality from the team.

Required requirements (favorite)
-Good understanding of the principles of Devsecops and the architecture of modern heat.
Excellent written and oral skills in German.

Sækja um starf