Information Security Lead

- Develop, maintain, and continuously refine the overall information security strategy and roadmap for the organization, aligning it with business objectives and risk appetite.

- Conduct risk assessments and maintain risk registers with timely remediation.

- Drive GRC initiatives: policy governance, control mapping, risk treatment, and compliance reporting.

- Manage audits, inspections, and accreditation processes.

- Manage programs for vulnerability scanning and penetration testing.

- Collaborate with IT and engineering teams to ensure new systems, applications, and infrastructure projects are designed with security principles built-in (Security by Design).

- Align security controls with biomedical, IT, and clinical workflows.

- Assess third-party vendors for data protection and integration risks.

- Lead cybersecurity awareness programs for healthcare staff.

- Implement healthcare-specific security technologies (e.g., secure messaging, endpoint protection for medical devices, cloud security for telehealth).

- Automate and optimize security processes for improved response and efficiency.

- Ensure compliance with all applicable internal policies, regulatory requirements (e.g., GDPR, HIPAA, PCI DSS, NIST, ISO 27001), and legal obligations.