Job Summary:

The Cybersecurity Expert provides specialist cybersecurity support for digital health systems developed, hosted or supported by Ministry of Health and CIDRZ.

The incumbent assesses cybersecurity risks, manages vulnerabilities, supports secure design and development, and leads the response to security incidents.

Main Duties:

1. Conducts cybersecurity risk assessments of applications, infrastructure and integrations, and maintains the risk and remediation register.
2. Develops and maintains security standards, procedures and technical baselines, and advises teams on appropriate controls.
3. Coordinates vulnerability scanning, security assessments and authorised penetration testing, and tracks findings through remediation and closure.
4. Monitors security events, investigates suspicious activity and coordinates containment, investigation, recovery and lessons learned for security incidents.
5. Maintains and tests incident-response procedures and ensures incident information is properly preserved and documented.
6. Participates in architecture and design reviews and provides secure-development guidance to software engineers.
7. Reviews access controls, infrastructure configurations, encryption, logging and secrets management against approved standards.
8. Supports compliance with applicable laws, policies and data-protection requirements, and delivers security awareness and technical training.

Qualifications

9. Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or related field.
10. At least four years' relevant cybersecurity or information-security experience.
11. Demonstrated experience in vulnerability assessment, incident response, security monitoring or security administration.
12. CISSP, CISM, Security+, CEH, SSCP, ISO 27001 or comparable recognised certification.
13. Health-sector cybersecurity experience.
14. Experience securing cloud and web applications.

Technical Knowledge and Skills

Vulnerability management; network and application security; identity and access management; security logging; SIEM concepts; incident response; secure configuration; threat analysis; web application security; encryption; cloud security; secure SDLC