Deskripsi Pekerjaan
Join St. Luke's Medical Center as an IT Risk Analyst and become a key guardian of our digital healthcare ecosystem. In this critical role, you'll identify, assess, and mitigate technology risks that could impact patient safety and operational integrity. You'll collaborate with cross-functional teams to implement robust risk management frameworks, ensuring compliance with healthcare regulations like HIPAA and ISO 27001. This position offers the opportunity to work in a dynamic hospital environment where your expertise directly contributes to safeguarding sensitive patient data and maintaining seamless IT operations.
As part of our risk management team, you'll conduct regular audits, develop mitigation strategies, and prepare comprehensive risk reports for senior leadership. The ideal candidate will leverage their analytical skills to proactively address emerging threats while fostering a culture of security awareness across the organization. If you're passionate about leveraging technology to protect healthcare systems and want to make a tangible impact in a leading medical institution, this role offers unparalleled growth opportunities in the heart of Metro Manila.
Tanggung Jawab
- Identify, evaluate, and document IT risks across hospital systems and processes
- Develop and implement risk mitigation strategies aligned with healthcare regulations
- Conduct periodic IT risk assessments and security audits
- Collaborate with IT and clinical departments to embed risk controls into workflows
- Prepare comprehensive risk reports and present findings to leadership
- Monitor compliance with industry standards (ISO 27001, NIST, HIPAA)
- Stay current with evolving cybersecurity threats and risk management best practices
Kualifikasi
- Bachelor's degree in Information Technology, Computer Science, or related field
- Minimum 3 years of experience in IT risk management or cybersecurity
- Strong knowledge of risk management frameworks (ISO 27001, NIST, COBIT)
- Experience working in healthcare or regulated industry preferred
- Excellent analytical and problem-solving skills with attention to detail
- Relevant certifications (CRISC, CISA, CISSP) highly valued
- Proficient in risk assessment tools and methodologies
- Strong communication skills for technical and non-technical stakeholders