Specific Responsibilities:
- Assess and address cybersecurity risks stemming from non-compliance with policy requirements during the procurement of medical equipment, including both newly acquired and vendor-loaned equipment.
- Document and present instances of non-compliance to relevant stakeholders, securing necessary approvals from the Ministry of Health (MOH).
- Prepare cybersecurity risk assessment reports and evaluate risks associated with changes to the configuration or requirements of medical equipment.
- Maintain and update the Risk Register for medical devices, ensuring the effective implementation of mitigation measures for IT-related risks.
- Ensure medical equipment software is updated upon delivery and plan for regular patching and updates throughout its operational lifecycle.
- Continuously monitor the compliance status of medical devices with MDOTS requirements over their lifecycle.
- Participate in IT-related projects that involve medical equipment integration.
- Collaborate with the IT team and vendors to plan server configurations and install software for medical devices.
- Conduct ongoing monitoring of the health and vulnerability status of medical devices and their associated servers.
- Work closely with end users to manage cybersecurity incidents involving medical equipment, implementing necessary mitigation measures before returning the equipment to service.
Requirements:
- A degree in Computer Science, Information Technology, or a related field focusing on cybersecurity, with at least 3 years of experience in healthcare or cybersecurity assessments for the Engineer role.
- A degree in Computer Science, Information Technology, or a related field focusing on cybersecurity, with at least 5 years of experience in healthcare or cybersecurity assessments for the Senior Engineer role.
- Hands-on experience with various security tools and products (e.g., Fortify, AppScan, Nessus).
- Professional Licenses (if any): Candidates with certifications such as OSCP, CREST, CEH, CISSP, AWS, CISA, CISM, or a specialty in cloud security are highly preferred.
Interested candidates, who wish to apply for the advertised position, please email us an updated copy of your resume. We regret that only shortlisted candidates will be notified.
Job Code: MONT
EA Registration No. R22111084
EA License No.: 01C4394
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOLKELLY Singapore Pte Ltd and its affiliates to collect, use and disclose your personal data for the purposes set out in the Privacy Policy available at https://www.persolkelly.com.sg/policies. You acknowledge that you have read, understood, and agree with the Privacy Policy
