Cyber Security Expert – Digital Health Systems

About the role

The Cybersecurity Expert provides specialist cybersecurity support for digital health systems developed, hosted or supported by the Ministry of Health and CIDRZ. The incumbent assesses cybersecurity risks, manages vulnerabilities, supports secure design and development, and leads the response to security incidents.

Key responsibilities

• Conduct cybersecurity risk assessments of applications, infrastructure and integrations, and maintain the risk and remediation register.
• Develop and maintain security standards, procedures and technical baselines, advising teams on appropriate controls.
• Coordinate vulnerability scanning, security assessments and authorised penetration testing, tracking findings through remediation and closure.
• Monitor security events, investigate suspicious activity and coordinate containment, investigation, recovery and lessons learned for security incidents.
• Maintain and test incident‑response procedures, ensuring incident information is properly preserved and documented.
• Participate in architecture and design reviews, providing secure‑development guidance to software engineers.
• Review access controls, infrastructure configurations, encryption, logging and secrets management against approved standards.
• Support compliance with applicable laws, policies and data‑protection requirements, and deliver security awareness and technical training.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering or a related field.
• At least four years of relevant cybersecurity or information‑security experience.
• Demonstrated experience in vulnerability assessment, incident response, security monitoring or security administration.
• Professional certifications such as CISSP, CISM, Security+, CEH, SSCP, ISO 27001 or comparable recognised certification.
• Health‑sector cybersecurity experience and experience securing cloud and web applications.

Required skills

• Vulnerability management
• Network and application security
• Identity and access management
• Security logging and SIEM concepts
• Incident response
• Secure configuration
• Threat analysis
• Web application security
• Encryption
• Cloud security
• Secure SDLC