IT Security Audit and Compliance Specialist

Core responsibilities Work within a national eHealth ecosystem and collaborate with government, healthcare providers, technology vendors and multidisciplinary clinical and technical teams. Produce clear, auditable documentation such as plans, requirements, designs, test evidence, operating procedures, reports, dashboards, risks, issues and decisions. Apply structured governance, escalate delivery or compliance risks early and maintain traceability from requirement to implementation and acceptance. Support knowledge transfer, training, stakeholder adoption and transition to sustainable business-as-usual operations. Protect health information and follow applicable privacy, security, confidentiality and regulatory requirements. Lead or perform risk-based audit planning, scope, objectives and test programmes in accordance with approved governance and delivery standards. Lead or perform controls matrices and multi-framework mapping in accordance with approved governance and delivery standards. Lead or perform application, infrastructure, network and cloud-security audits in accordance with approved governance and delivery standards. Lead or perform azure, O365, DLP, IAM/PAM and configuration/hardening reviews in accordance with approved governance and delivery standards. Lead or perform vulnerability management, attack vectors and remediation tracking in accordance with approved governance and delivery standards. Lead or perform evidence collection, working papers, findings and executive reports in accordance with approved governance and delivery standards.

Desired Candidate Profile

Risk-based audit planning, scope, objectives and test programmes Controls matrices and multi-framework mapping Application, infrastructure, network and cloud-security audits Azure, O365, DLP, IAM/PAM and configuration/hardening reviews Vulnerability management, attack vectors and remediation tracking Evidence collection, working papers, findings and executive reports SOC, SIEM/SOAR/EDR, incident response and security monitoring awareness Coordination with internal/external audit and business/IT owners Employment Type Full-time

Keywords