IT Security Audit and Compliance Specialist

Core responsibilities • Work within a national eHealth ecosystem and collaborate with government, healthcare providers, technology vendors and multidisciplinary clinical and technical teams. • Produce clear, auditable documentation such as plans, requirements, designs, test evidence, operating procedures, reports, dashboards, risks, issues and decisions. • Apply structured governance, escalate delivery or compliance risks early and maintain traceability from requirement to implementation and acceptance. • Support knowledge transfer, training, stakeholder adoption and transition to sustainable business-as-usual operations. • Protect health information and follow applicable privacy, security, confidentiality and regulatory requirements. • Lead or perform risk-based audit planning, scope, objectives and test programmes in accordance with approved governance and delivery standards. • Lead or perform controls matrices and multi-framework mapping in accordance with approved governance and delivery standards. • Lead or perform application, infrastructure, network and cloud-security audits in accordance with approved governance and delivery standards. • Lead or perform azure, O365, DLP, IAM/PAM and configuration/hardening reviews in accordance with approved governance and delivery standards. • Lead or perform vulnerability management, attack vectors and remediation tracking in accordance with approved governance and delivery standards. • Lead or perform evidence collection, working papers, findings and executive reports in accordance with approved governance and delivery standards. • Risk-based audit planning, scope, objectives and test programmes • Controls matrices and multi-framework mapping • Application, infrastructure, network and cloud-security audits • Azure, O365, DLP, IAM/PAM and configuration/hardening reviews • Vulnerability management, attack vectors and remediation tracking • Evidence collection, working papers, findings and executive reports • SOC, SIEM/SOAR/EDR, incident response and security monitoring awareness • Coordination with internal/external audit and business/IT owners