Deputy Group Chief Information Security Officer, SingHealth

We are looking for highly motivated and experienced cybersecurity leader to join the CISO office. You will support the Group Chief Information Security Officer (GCISO) in developing, implementing, and maintaining the group's information security vision, strategy, and roadmap, ensuring alignment with organizational goals and business priorities.

Reporting to the GCISO, you will be responsible for the day-to-day operations of the cyber security program and cybersecurity governance for SingHealth Information and Communications Technology systems, including Electronic Medical Record (EMR) systems, telehealth platforms, medical device systems, and cloud solutions.

The role will require you to evaluate and recommend security technologies and solutions appropriate for the healthcare environment, conduct information security risk assessments across SingHealth to ensure compliance with cybersecurity legislations and healthcare regulations. 

You will act as a trusted advisor to business and clinical leaders, manage specific security functions or teams and deputise for the GCISO as needed.  

Job Requirements:

• Master’s degree in computer science, engineering, information systems or equivalent
• Cybersecurity professional certifications (e.g., CISSP, CCSP, CCSK, CGEIT, PMP)
• Minimum 10 years of relevant experience, with at least 5 years in healthcare IT management roles
• Proven experience with EMR systems, medical device security and healthcare cloud security (AWS, Azure, GCP)
• Strong understanding of specific healthcare regulations (e.g., PDPA, Cybersecurity Act)
• Proficiency in security frameworks and standards (NIST CSF, ISO 27000 series, etc.)
• Deep technical knowledge across multiple security domains (network, endpoint, cloud, application security)
• Comprehensive understanding of healthcare operations, clinical workflows, and the criticality of system availability and data integrity in patient care
• Excellent leadership, team management, and mentoring skills
• High integrity with excellent communication and presentation skills, with the ability to articulate complex technical issues to both technical and non-technical audiences