Sg] Director Security

About the Team

The Security, Infrastructure & IT Operations team is critical to Doctor Anywhere’s success, safeguarding our digital and physical infrastructure while enabling innovation in a regulated healthcare environment. This team is responsible for cybersecurity, platform engineering (cloud & data infra), corporate IT systems, and technical operations supporting both our digital products and physical clinics—including health screening centers and on-site medical devices.

About the Role

We are hiring a strategic and hands-on Director of Security & Platform Engineering to lead and unify our Security, IT Operations, and Platform Engineering teams. This role is accountable for the end-to-end security posture and technical infrastructure across Doctor Anywhere’s digital platforms and physical clinic operations.

You will be reporting directly to the CTO and will manage a team that supports internal systems, customer-facing infrastructure, and core clinical operations technology—spanning cloud services, data infrastructure, identity management, developer platforms, and IT environments used in medical centers.

This position plays a key role in advancing the security and infrastructure maturity of Doctor Anywhere as we scale to serve increasingly complex healthcare needs across the region. We're looking for a leader who can build on our strong foundation to align our platforms, practices, and operations with the highest standards of trust, resilience, and regulatory excellence—supporting our evolution into broader, more regulated domains.

**Responsibilities**:
Strategic Leadership
- Lead and scale the Security, IT Operations, and Platform Engineering teams, with direct reports across Singapore and Ho Chi Minh City.
- Own the strategic roadmap for DA’s security, infrastructure, and IT tooling—including budget, vendor management, and operational maturity.
- Collaborate with the Principal Engineer and tech leads to integrate platform reliability and security best practices across engineering.

Security, GRC & Compliance
- Define and implement a unified security strategy that ensures compliance with regional regulations (PDPA, HIPAA, etc.) and security standards (e.g., ISO 27001, SOC 2).
- Own governance, risk management, and incident response planning across both digital and physical environments.
- Serve as Data Protection Officer (DPO) and act as the primary security point-of-contact for audits, enterprise customers, and government partners.
- Lead adoption of secure coding practices and GenAI security awareness across the engineering team.

Platform Engineering
- Oversee DA’s multi-cloud infrastructure (AWS & GCP), internal developer platforms, and core backend systems that power our digital healthcare products and services. This includes responsibility for cloud reliability, security, data infrastructure, access control, and platform services that enable high-performance engineering at scale.
- Drive engineering productivity by delivering modern platform tooling—including secure-by-design workflows, observability, deployment automation, and AI-assisted developer tools—to empower all DA tech teams to build faster, more safely, and at scale.

IT Operations (Digital + Clinical Systems)
- Lead corporate IT operations across all DA offices and clinics, ensuring robust endpoint management, SaaS administration, and service desk coverage.
- Own and scale the technical infrastructure that supports Doctor Anywhere’s physical healthcare operations, including clinics and health screening centers—ensuring secure, reliable integration between clinical systems, medical devices, and enterprise IT environments.
- Ensure system reliability, physical security, and compliance across clinical IT environments.
- Develop secure IT deployment models and support standards for new clinic launches and medical device integrations.

Operational Excellence & Culture
- Champion a security-first culture across product, engineering, and operations teams.
- Build training programs to drive awareness of physical and cyber risks, and promote shared accountability.
- Establish KPIs, dashboards, and internal reporting on infrastructure health, IT efficiency, and security posture.

About You
- 10+ years of experience spanning information security and cloud infrastructure, including 5+ years in a leadership capacity.
- Proven leadership of multi-functional, geographically distributed teams.
- Strong technical background in cloud-native architecture, containerisation, security engineering, identity and access management, big data platforms, and DevSecOps.
- Experience in regulated industries (e.g., healthcare, fintech, life sciences), with working knowledge of security and data protection standards such as PDPA, ISO/IEC 27001, and SOC 2. Familiarity with HIPAA is a plus.
- Familiarity with clinical IT systems (e.g., CMS, PACS, medical device infrastructure) is a plus, but not required
- Excellent communication skills, with the ability to influe