Information Security Specialist

The Information Security Specialist is a strategic role within DeepHealth’s Quality, Regulatory, and Compliance department, responsible for assisting in the development, implementation, and maintenance of comprehensive information security compliance strategies. This position is critical in protecting organizational data, ensuring regulatory adherence, and mitigating potential security risks in the complex digital health landscape.

Duties and Responsibilities

As the Information Security Specialist, this position will work with the Information Security Officer, IT Operations, Sec Operations and the broader Compliance team to:

Information Security Compliance Strategy:

· Develop and implement holistic security compliance programs

· Create comprehensive risk management frameworks

· Design and maintain security policies, procedures, and guidelines

· Continuously assess and update security strategies

· Ensure alignment with organizational objectives and regulatory requirements

Regulatory Compliance:

· Ensure compliance with complex regulatory standards including, but not limited to:

o HIPAA

o GDPR

o CCPA

o ISO 27001

o HITRUST

· Conduct thorough risk assessments and vulnerability evaluations

· Prepare detailed compliance reports and documentation

· Support external and internal audit processes

· Track and implement regulatory changes

Technical Security:

· Perform comprehensive security vulnerability assessment

· Develop and implement security control frameworks

· Monitor and analyze security incidents and breaches