Assistant Manager, Information Security & Governance

Job Description

Title: Assistant Manager, Information Security & Governance

Company Name: Evercare Hospital Dhaka

Vacancy: --

Age: At least 30 years

Job Location: Dhaka (Basundhara RA)

Salary: --

Experience:

• 3 to 5 years
• The applicants should have experience in the following business area(s): Hospital

• Bachelor in Engineering (BEngg) in Computer Science & Engineering

• 3 to 5 years
• The applicants should have experience in the following business area(s): Hospital

• Age At least 30 years

• Information Security Management System.

• Audit and GRC assistance

• Hands-on experience with security frameworks, risk assessment methodologies, and compliance audits

Information Security Management

• Assist in the design, implementation, and maintenance of the Information Security Management System (ISMS) in line with ISO 27001, NIST and other relevant standards.

• Conduct regular risk assessments, vulnerability assessments, and threat modeling across IT systems, applications, and infrastructure.

• Support the development and enforcement of security policies, procedures, standards, and guidelines.

• Monitor and manage security incidents, coordinate response activities, and ensure timely resolution and post-incident reviews.

• Oversee the implementation of security controls (technical, administrative, and physical) to protect confidentiality, integrity, and availability of information assets.

IT Governance & Compliance

• Support the establishment and maintenance of IT Governance frameworks, including policies for data classification, access control, third-party risk management, and change management.

• Ensure compliance with applicable laws, regulations, and standards

• Coordinate internal and external audits related to information security and governance; track and close audit findings.

• Prepare and present security and governance reports, dashboards, and metrics to senior management and stakeholders.

• Manage third-party vendor security assessments and contracts from a security and compliance perspective.

Strategy & Awareness

• Contribute to the development and execution of the organization's Information Security strategy and roadmap.

• Plan and deliver security awareness and training programs for employees and stakeholders.

• Stay updated on emerging security threats, technologies, and regulatory changes; recommend appropriate actions.

• Support business units in integrating security and governance requirements into new projects and digital initiatives.