Deputy Director

Deputy Director - Policy & Compliance (Risk & Sector Governance)

Join to apply for the Deputy Director - Policy & Compliance (Risk & Sector Governance) role at Synapxe

Position Overview

You will play a significant role in the public healthcare sector as the enabler and integrator to drive the end-to-end lifecycle of cybersecurity and technology risk management policies, standards, controls design, control self-assessment, attestation, and deviation management in the public healthcare sector. You will be responsible for developing and contextualizing cybersecurity and technology risk-related policies and continuously increasing cybersecurity maturity and capabilities through effective stakeholder management, active listening, and meeting business and policy requirements. You will apply your existing solid working experience and knowledge of continuous improvement, governance, risk management, and compliance.

Role & Responsibilities

• Be the integrator and key point of contact for cybersecurity and technology risk policies, standards, guidelines, and control libraries development and maintenance, facilitating engagement and collaboration with various stakeholders in the public healthcare sector. Work with MOH to develop cybersecurity and technology risk regulatory policies and standards that are contextualized and operationally feasible for public healthcare entities.
• Oversee the translation of policy and regulatory requirements into the design of required controls for Synapxe lines of business and maintain the Healthcare Control Library.
• Design and deliver control self-assessment processes to report on Synapxe compliance via attestation, deviation management, and tracking to closure.
• Engage and drive alignment with both Synapxe and MOHH stakeholders, including CIOs, CISOs, CDOs, and senior management.
• Facilitate the rollout of campaigns on policies, control library, and attestation to increase compliance and risk posture.
• Drive cybersecurity policies and control adherence programs and foster an innovation-driven cyber risk awareness culture.
• Evaluate evolving risk trends, posture, and the changing threat landscape to ensure policies, standards, guidelines, and control libraries remain relevant and fit-for-purpose.
• Own the development and continuous improvement of the Public Healthcare cybersecurity policies socialization campaign.
• Evaluate emerging technologies, trends, and regulatory changes.
• Maintain effective working relationships with peers, stakeholders, and regulators to seamlessly integrate policy adherence into the sector's strategic objectives.
• Demonstrate domain expertise by creating learning content, presenting, and supporting a continuous learning culture.
• Lead the execution of strategic directions and team leadership.

Requirements

• Bachelor's degree in computer science or STEM majors with over 18 years of experience.
• Recognized industry certifications such as CISA, CISM, CRISC, CGEIT, CISSP, or GIAC.
• Experience in policy, standards, and guideline implementation in cybersecurity and technology risk domains.
• Strong technical writing skills and attention to detail.
• Knowledge of frameworks & standards like IM8, NIST CSF, COBIT5/2019, ISO27000 series.
• Understanding of cybersecurity, risk management, and compliance concepts and processes.
• Ability to consult and influence stakeholders on technical outcomes.
• Experience in designing solution roadmaps and implementation plans.
• Understanding of business models and active customer engagement.
• Change management capabilities.
• Strong interpersonal skills, creativity, and curiosity.
• Analytical and problem-solving skills.

Apply Now

Click Enter to update the description of Apply Now. NOTE: It only takes a few minutes to apply for a meaningful career in HealthTech - GO FOR IT

Seniority level

• Director

Employment type

• Full-time

Job function

• Legal

Industries

• IT Services and IT Consulting

#J-18808-Ljbffr

---