Deskripsi Pekerjaan
Are you a seasoned cybersecurity professional passionate about safeguarding critical healthcare infrastructure? Thomson Medical is seeking a highly skilled Senior Cybersecurity Engineer to join our team in Novena. In this pivotal role, you will be the primary guardian of our digital ecosystem, ensuring the end-to-end protection of sensitive patient data, complex medical systems, and our corporate digital assets.
As we continue to advance our digital health initiatives, security remains our top priority. You will lead technical security initiatives, architect robust defense frameworks, and proactively mitigate emerging threats in a fast-paced medical environment. If you thrive on solving complex security challenges and have a deep commitment to maintaining the highest standards of data integrity and privacy, we want to hear from you.
Tanggung Jawab
- Design, implement, and maintain comprehensive security architectures to protect Thomson Medical's enterprise systems and cloud infrastructure.
- Conduct regular vulnerability assessments and penetration testing to identify and remediate potential security gaps.
- Lead incident response activities, including threat analysis, containment, and root cause investigation for cybersecurity incidents.
- Manage and optimize security tools such as firewalls, SIEM, EDR, and IAM solutions to ensure 24/7 environment monitoring.
- Collaborate with cross-functional IT teams to integrate "Security by Design" principles into new medical software and infrastructure projects.
- Develop and enforce cybersecurity policies, compliance frameworks, and best practices in alignment with healthcare regulations (e.g., PDPA, HIPAA).
- Stay at the forefront of cyber threat intelligence to proactively update defensive strategies against evolving attack vectors.
Kualifikasi
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- Minimum 5-7 years of professional experience in cybersecurity engineering or infrastructure security, preferably within the healthcare or highly regulated sectors.
- Professional certifications such as CISSP, CISM, CEH, or GIAC are highly preferred.
- In-depth knowledge of network security, cloud security (AWS/Azure/GCP), and modern endpoint protection technologies.
- Hands-on experience with SIEM platforms, vulnerability scanning tools, and security orchestration/automation.
- Strong analytical mindset with the ability to translate technical security risks into clear business requirements.
- Excellent communication and stakeholder management skills to foster a culture of cybersecurity awareness.