Senior / Manager (Health Info Protection Office)

You will play an important role in evolving the MOH, Health Regulation Group (HRG)’s anticipatory and participatory regulatory approach to ensure patient safety and welfare in Singapore’s healthcare landscape. As part of the team under the Aged & Ancillary Service Regulations & Transformation Division (AART), you will develop and implement advisories, guidance, and other regulatory tools to enable health transformation, to achieve a more efficient and effective health regulatory regime, in particular the upcoming Health Information Bill (HIB).
Broadly, the HIB is intended to support contribution of selected health data to the National Electronic Health Record (NEHR) and puts in place requirements for healthcare providers to meet requisite cybersecurity and data security requirements.
Specifically, the role involves ensuring healthcare organisations comply with the regulatory requirements under the HIB such as through inspections, audits and complaints management, as well as managing cybersecurity incidents and health information breaches that are reported to MOH. The role will also involve close collaboration with teams leading our systems development and analytics framework, enforcement, as well as interactions with our Chief Medical Informatics Officer's Office and relevant policy teams from the Infocomm Technology and Data Group.
This supports the establishment of an efficient and effective health information regulatory regime.
The shortlisted candidates will be appointed to support one of the following key functions in Health Information Protection Office:
Health Information & Cyber Compliance
Health Information Incident Management
You will be working in a fast-paced and dynamic environment that would require the ability to manage multiple priorities and stakeholders at the same time.
What You Will Be Working On
This role involves conducting audits, identifying vulnerabilities, and making recommendations to ensure that cyber and data security protocols comply with prevailing regulations. This would include:
Collaborating with relevant policy teams and government agencies to translate regulatory policies to effective implementation plans and manage the execution of these plans;
Developing workflows, processes, and systems for implementation of new regulations;
Identifying and proposing suitable solutions to better streamline regulatory activities to achieve greater efficiency, and to see through its implementation.
Supporting the development of advisories and guidelines to improve regulated entities’ compliance to regulatory requirements;
Engaging stakeholders and healthcare organisations to communicate regulatory requirements, understand industry risks and review regulatory strategies.
Triaging, classification, referral and escalation of reported cybersecurity incidents and health information breaches, including coordination with relevant MOH, PDPC and CSA teams (where required).
What We Are Looking For
Tertiary education in Information Technology, Computer Science, or a related field.
Knowledge of information security and data protection laws and regulations
Possession of industry recognized credential such as CISSP, CISM, CISA, CIPT or similar certification would be an advantage.
Experience in IT auditing or data privacy compliance would be an advantage.
Working experience in healthcare setting would be an advantage
Good analytical, written and communications skills
Good people management, leadership and engagement skills
Ability to work under pressure and minimal supervision.
Ability to work independently and in a Team
Possess high standards of professionalism, personal discipline and integrity.
Ability to meet timelines and produce high quality work within the stipulated timelines
Prior experience in cybersecurity, health information sharing, National Electronic Health Record (NEHR), and/or incident management and response would be an advantage
Prior experience in stakeholder management or in partnerships /