Lead, Cybersecurity & Data Privacy

About the role

The Lead, Cybersecurity & Data Privacy is responsible for safeguarding sensitive healthcare data and ensuring compliance with data protection regulations across all facilities. This role drives the development and implementation of robust cybersecurity strategies, risk management frameworks, and privacy policies to protect patient and organizational information.

Key responsibilities

• Develop, implement and monitor cybersecurity policies, procedures and controls to protect healthcare data and IT infrastructure.
• Ensure compliance with local and international data privacy regulations through regular audits and risk assessments.
• Lead incident response efforts, including investigation, containment and reporting of security breaches.
• Provide training and awareness programs for staff on data privacy best practices and cybersecurity protocols.
• Collaborate with the Digital Health & Data Management team to embed security measures into new technologies and systems.

Required profile

• 6‑10 years of progressive experience in cybersecurity, data privacy or IT risk management, preferably in the healthcare sector.
• Bachelor’s degree in Cybersecurity, IT, Computer Science or related field; professional certifications such as CISSP, CISM or CIPP are highly desirable.
• In‑depth knowledge of data protection laws (HIPAA, GDPR) and cybersecurity frameworks (NIST, ISO 27001).
• Proven expertise in risk assessment, security architecture and incident management.

Required skills

• NIST framework
• ISO 27001
• HIPAA
• GDPR
• Risk assessment
• Security architecture
• Incident response
• CISSP, CISM, CIPP certifications