A2
A2SECURECybersecurity Consultant
Cybersecurity Consultant ensuring cybersecurity operations and delivering consultancy projects for clients, focusing on strategic risk management and compliance assessments.
About the role
- Support the development and implementation of security protocols to protect OnMed’s data, infrastructure, networks, and facilities.
- Assist in the configuration and management of monitoring and alerting tools to proactively detect and respond to threats.
- Collaborate cross-functionally to ensure platforms comply with OnMed’s security policies and infrastructure.
- Manage access controls for digital systems and physical facilities.
- Maintain and continuously improve SOC 2 control frameworks.
- Work closely with external auditors and internal stakeholders to ensure evidence collection and policy adherence.
- Monitor control effectiveness and support remediation efforts where needed.
- Review and respond to security questionnaires from vendors and customers.
- Conduct security due diligence on third-party tools and service providers.
- Track and maintain documentation for vendor risk assessments.
- Lead triage, investigation, and mitigation of security incidents.
- Coordinate with relevant teams to ensure timely containment and recovery.
- Conduct root cause analysis and recommend improvements to prevent recurrence.
- Collaborate with IT and engineering to implement and manage security tools (SIEM, EDR, etc.).
- Monitor infrastructure and application logs for threats and anomalies.
- Automate security checks and integrate security into CI/CD pipelines as needed.
- Assist in the development and enforcement of security policies and procedures.
- Support employee security training and awareness initiatives.
- Assist in the implementation of Zero Trust protocols across OnMed platforms.
- Leverage automation to monitor, alert, and resolve security incidents.
- Help maintain compliance with SOC 2 and HITRUST standards and contribute to formal reporting efforts.
- Participate in regular risk assessments and internal audits.
- Support physical security operations, including access control and video surveillance audits.
- Perform other related role responsibilities as assigned.
Requirements
- Strong foundational understanding of information security principles and practices.
- Experience securing cloud platforms (Azure or AWS) and on-prem infrastructure.
- Proficiency in endpoint security across workstations, network appliances, and other devices.
- Familiarity with monitoring, alerting, and incident response tools.
- Ability to conduct risk assessments and support compliance initiatives.
- Strong analytical and problem-solving skills.
- Excellent communication and interpersonal abilities.
- Ability to work independently and collaboratively in a fast-paced environment.
- Detail-oriented with a proactive and forward-thinking mindset.
- Encryption at rest and in transit
- Experience in Key management (e.g., AWS KMS)
- Experience in the healthcare industry or with healthcare compliance standards (nice-to-have).
- Familiarity with Zero Trust architecture and implementation (nice-to-have).
- Experience with automation tools for security operations (nice-to-have).
- Hands-on experience with physical security systems (e.g., access control, surveillance) (nice-to-have).
- Exposure to SOC 2 and HITRUST compliance frameworks (nice-to-have).
- Experience working with external vendors for security assessments (nice-to-have).
- Experience with Firewalls, VPNs, IDS/IPS (nice-to-have).
- Experience in Network segmentation (nice-to-have).
- Understanding of OWASP Top 10 (nice-to-have).
- Secure coding practices (nice-to-have).
- Tokenization and hashing (nice-to-have).
- SAST/DAST tools (e.g., SonarQube, Burp Suite) (nice-to-have).
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- 5+ years of experience in information security, preferably in a regulated industry.
- 3+ years of experience securing cloud and on-prem environments.
- Industry certifications such as CISSP, CISM, GSEC, or equivalent.
- Azure and/or AWS security certifications preferred.
Benefits
- OnMed provides a competitive salary and benefits package
- Unlimited PTO
- Paid holidays
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Leads SOC team ensuring cybersecurity for LWSA's operations. Responsible for team management, incident response, and security monitoring.
LG
Liebherr GroupSenior IT Security Engineer
Senior IT Security Engineer developing and optimizing innovative security solutions in an international environment. Engaging in corporate information security utilizing best practices.
Regional Lead overseeing physical security infrastructure and operations for OpenAI’s data centers in Singapore. Collaborating with teams and managing security technologies for compliance and risk assessment.
ZS
Business Continuity and Cybersecurity Awareness Manager at ZEAL, leading BCM and cybersecurity training initiatives. Ensuring resilient operations and fostering secure behavior across teams.
BG
Bureau Veritas GroupOperations Manager, Fire Safety and Building Equipment
Responsable d'Opérations en sécurité incendie et équipements du bâtiment chez Bureau Veritas. Animer une équipe tout en contribuant au développement commercial et à la qualité des prestations.
Senior Inhouse IT Consultant responsible for the network and server infrastructure of the L - mobile Group. Planning security measures and managing cloud and virtualization platforms.
SK
Sana KlinikenJunior Information Security Officer
(Junior) Information Security Officer responsible for ISMS management at Sana Clinics. Ensuring compliance with NIS - 2 and training staff on information security.
Senior Manager in Cybersecurity leading Cyber Defense Center operations and strategy development for effective threat response. Collaborating with stakeholders to enhance security posture across the organization.
Manager overseeing threat hunting and incident response using SIEM platforms in a leading financial institution in MENA. Enhancing security operations with expertise in Cyber Defense Center and Security Operations Center roles.