Information Security Analyst

About the Role

Al Salama Hospital is seeking an Information Security Analyst to join its team. This full-time role involves monitoring, analyzing, and enhancing the hospital's security posture. The analyst will identify risks, assess vulnerabilities, and ensure compliance with cybersecurity and information protection standards, aligning with hospital policies, Ministry of Health (MOH) regulations, and JCI/CBAHI requirements.

Key Responsibilities

• Conduct regular risk assessments and vulnerability analyses across ICT systems and hospital databases.
• Monitor, investigate, and respond to cybersecurity incidents, threats, and anomalies.
• Maintain and enhance incident response and disaster recovery plans.
• Support the ICT Director in ensuring compliance with MOH, CBAHI, and JCI cybersecurity standards.
• Prepare and maintain documentation for regulatory inspections and audits.
• Track and close corrective actions related to audit findings.
• Develop, implement, and monitor information security policies, standards, and procedures.
• Deliver information security awareness training and promote best practices among staff.
• Prepare periodic information security reports and dashboards for management review.

Experience Required

Candidates should possess 3 years of experience in information security or a related field.

Compliance and Governance Focus

A significant aspect of this role involves ensuring the hospital's adherence to critical cybersecurity standards set by the Ministry of Health (MOH), CBAHI, and JCI. The analyst will be responsible for preparing documentation for regulatory inspections and audits, as well as managing corrective actions stemming from audit findings.

Policy Development and Awareness

The Information Security Analyst will be instrumental in developing and implementing information security policies, standards, and procedures. This includes delivering awareness training to staff and promoting best practices to foster a secure environment across the hospital.

Reporting and Communication

This role requires the preparation of periodic information security reports and dashboards for management review, providing clear insights into the hospital's security posture and compliance status.