Risk and Governance Engineer

Job Description

Strengthen our security posture. Ensure compliance. Mitigate risk. Drive trust and build a safer, more resilient healthcare future.

Required Skills & Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related field.
• Strong knowledge of risk management frameworks and security best practices.
• Hands-on experience with penetration testing and vulnerability assessment tools.
• Understanding of compliance frameworks (HIPAA, SOC 2, ISO 27001, NIST CSF).
• Experience preparing detailed reports and presenting risk insights to management.
• Ability to interpret technical risks and translate them into actionable business recommendations.
• Strong analytical, documentation, and problem-solving skills.
• Excellent communication and cross-functional collaboration abilities.

Nice to Have

• Certifications such as CEH, OSCP, CompTIA Security+, CISSP, CISA, or ISO 27001 Lead Implementer.
• Experience with SIEM solutions and log analysis (e.g., Splunk, Sentinel).
• Familiarity with cloud security (Azure, AWS, GCP).
• Knowledge of ESG frameworks such as GRI, SASB, or ISO 26000.
• Experience developing automated workflows for risk assessments or compliance tracking.
• Understanding of DevSecOps practices and secure SDLC
• Exposure to data privacy and governance tools (DLP, CASB, MDM, EDR).
• Ability to lead training and awareness programs on security and governance topics.

Be part of a purpose-driven team focused on security, compliance, and innovation in healthcare.