Group Chief Information Security Officer (NHG Health)

Position Overview

The Group Chief Information Security Officer (GCISO) is responsible for establishing and maintaining the enterprise vision, strategy and security program to ensure information assets and technologies are adequately protected. This role involves leading the information security team developing security policies and ensuring compliance with regulatory requirements. The GCISO will work closely with senior management to align security initiatives with business objectives and manage risk effectively. 

Role & Responsibilities

• Develop and implement a comprehensive information security strategy that aligns with the organization’s goals while ensuring compliance with public healthcare IT security policies and standards.
• Lead and support the information security team, fostering a culture of security awareness among IT staff and end users to keep them informed of security threats and appropriate responses.
• Conduct thorough risk assessments and manage security incidents, serving as the primary point of contact for all security-related activities and ensuring timely response and recovery.
• Establish, maintain, and regularly update security policies, standards, and procedures to safeguard the organization’s information assets and ensure compliance with relevant laws and regulations.
• Collaborate with IT and other departments to integrate security measures into all organizational operations, while conducting compliance checks for new projects and assessing their impact on the overall risk profile.
• Recommend and implement compensating controls for any deviations from established IT security policies and standards, continuously improving security practices across the organization.
• Monitor emerging threats and technologies, advising stakeholders on appropriate actions to mitigate risks and adapt the security strategy as necessary.
• Provide IT security advisory and consulting services to project teams ensuring that security considerations are integrated into all initiatives and projects.
• Participates and contributes as a member of Senior Management team at C-level, contributing to the organization’s overall strategic initiatives beyond just IT.  on overall organisation’s initiatives, not limited to IT only.

Requirements

• Degree in Computer Science, Information Technology or related field.
• Relevant certifications such as CISA, CISM and/or CISSP are highly desirable.
• Proven experience in a senior Information Security role, with at least 8 years of IT security experience in IT security infrastructure design and operations, and/or in an IT security compliance and assurance role.
• Hands-on experience in cybersecurity architecture, governance and systems integration.
• Strong knowledge of information security frameworks, risk management and compliance requirements.
• Proficiency in security technologies and tools.
• Ability to engage confidently with senior stakeholders and translate technical risks into actionable business recommendations.
• Ability to work collaboratively across departments and with external partners.
• Strong analytical skills and attention to details.
• Strategic thinking and problem-solving abilities.

Apply Now

NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT!!