Information Security Officer
Core
Design, implement, monitor, and govern the company's Information Security Management System (ISMS) according to ISO 27001:2022 to protect patient health information and company assets.
Role type
Information Security Officer (ISO 27001 Lead)
Builds
ISO 27001 compliant security framework and secure medical device solutions
Domain
Healthcare / Medical Devices / Information Security
Required skills
ISO 27001:2022 governance, risk management, internal/external audit management, vulnerability management, penetration testing, data protection compliance (GDPR/HIPAA), IT infrastructure management
Preferred skills
ISO 13485, NEN 7510, ISO 14973, medical device industry experience
Technologies
ISO 27001, ISO 13485, NEN 7510, GDPR, HIPAA
Responsibilities
Host bi-weekly Information Security Committee meetings, manage risk management files, consult developers on secure solutions, oversee vulnerability scans and penetration testing, manage critical IT systems and user endpoints
Seniority
Mid-Senior, hands-on IC