Job Description

About Doctor Anywhere At Doctor Anywhere, we are guided by the core belief that healthcare should be simple, accessible and efficient for everyone. Since our launch in 2017, we\'ve been disrupting the healthcare industry by developing innovative solutions to bridge gaps in the healthcare ecosystem. Our services integrate both digital and offline platforms to empower users to take charge of their health. Headquartered in Singapore, we have regional offices in Malaysia, Thailand, Philippines, Vietnam, and India, serving more than 2.5 millions (and growing) users across Asia.
Our team and the role we are hiring for We are seeking a Security Specialist to join our Infrastructure and Security team, and to partner with internal departments on security operations support.
The ideal candidate will have a proactive mindset of continuous improvement and change and will demonstrate curiosity, collaboration and the ability to deal with ambiguity especially in a start-up environment.
This role reports directly to the Head of Cyber Security.
Responsibilities

• Experience and knowledge on how to obtain and maintain ISO27K, SOC2, PCI-DSS, PDPA/DPTM, TRM certification and compliance (good to have GDPR awareness)
• Experience in a role as DPO or at least knowledge of DPO roles & responsibilities
• Knowledge of security and compliance regulations including data privacy and protection regulations is a must
• Experience assessing third-party/vendor/partner integrations from security and compliance perspective, able to flag risks and provide mitigation solutions
• Ability to assess security compliance incidents and establish the severity and priority of the same as well as respond to RCA requests from customers
• Conduct security & compliance reviews and advice Engineering and Business teams on how to maintain security & compliance and be able to conduct internal audit (good to have ISO27K lead auditor training)
• Conduct in-house trainings and create content to enhance understanding of all team members from security and compliance perspective.
• Strong focus on creating and maintaining compliance KPIs and be able to produce adhoc and periodic security and compliance reports for the apps and services
• Strong communication skills \xe2\x80\x93 communicating with business stakeholders
• Able to manage external audits and co-ordinate internally with other teams to respond from security and compliance perspective
• Be a single-point-of-contact for all Security-Compliance questions within the organization by keeping updated on rules and regulations in SG, TH, MY, PH, VN and Indonesia
• Experience working on security and compliance for on-premises (data center) and Cloud

• Holds a Degree in IT, Computer Science or other relevant fields
• Proven work experience as a System Security Engineer or Information Security Engineer
• Experience working with on-premises and cloud environments
• Problem solving skills and ability to work under pressure
• Ability to communicate clearly in both writing and verbally.
• You have unquestioned integrity and high standards in the work you do
• Genuine curiosity and strong desire to continuously learn and grow
• A start-up attitude \xe2\x80\x93 highly collaborative with an entrepreneurial, roll-up-your sleeves attitude, pragmatic, and able to work independently when required
• Comfortable with ambiguity - we\'re a fast-growing business and there\'s always unchartered territories, which is part of the fun. You should be comfortable with it and understand that not everything is 100% defined all the time.