IT Security & Compliance officer

Core Objective of the role:
He/ She will be fully responsible for data security & integrity in the organization consisting of patient data (PII, PHI – Patient Health information, Company data security, Cyber Security & Compliance & IT Audits etc.)
He should have good knowledge about emerging security & compliance requirements for the organization:
1. DPDP Act compliance
2. IT Act & CERT – In compliance knowledge
3. ISO & other industry standards
4. NABH Guidelines for Information
IS & Risk Management:
1. Access & Identity controls – RBAC, MFA, SSO etc.
2. Incident response – Identify & investigate the incident & share the process / procedure to close the gaps & own the solution till incident is closed. Need to share & report all critical incidents like patient data breach in the organization with management & with Govt. Authorities in case it is required as per legal compliance.
3. Vendor Risk Management
Audits, Training & Operations:
1. Conduct periodic Information security audits for IT Infrastructure comprising Endpoint Security (EDR, Patch Management, Access review management, Application security, Cyber Security, Network Security etc.)
2. Training the entire organization staff for cybersecurity awareness, Data compliance awareness & DPDPA awareness.
3. Policy creation for the organization, SOPs, Data handling policy, device provisioning & securing remote access to all applications & infrastructure.
Certification required or have good knowledge about below:
1. CISA, CISSP, CISM or CompTIA Security+
2. Lead Auditor for ISO27001:2025
Experience & Qualification:
1. Graduation in IT Security or similar field
2. Experience of 7 Years in IT Security & Compliance.
3. Strong knowledge of Indian Cyber Laws & DPDP Act & Indian Medical data confidentiality & Security

Work arrangement
No