Synthesis Health

In late 2021, the 1QBit Health Care team spun off from 1QBit to form a new company called Synthesis Health. Synthesis is a pioneer of medical technology solutions that owns and operates distributed radiology, medical imaging, and laboratory clinics. This integrated ecosystem of clinical care and technology development enables us to build and implement a new generation of AI-enabled software to drive quality, efficiency, and accessibility for patient care around the globe.

Your Role

As an Information Security and Privacy Analyst on the HealthCare team, you will be responsible for analyzing existing risk mitigation strategies, information security and privacy controls, and communicating to the leadership team on the efficacy of these measures, suggesting ways and means for improving them. You will set information Security and privacy risk mitigation goals required by Synthesis in alignment with ISO 27001 framework, GDPR, HIPAA, PIPEDA and report on the progress against them.

What You'll Do

Apply defined information and privacy risk management methodologies and frameworks (ISO 27001 & 27005, GDPR, HIPAA, PIPEDA) to identify and implement controls in support of confidentiality, integrity, and availability.
Maintain an information security and privacy risk register and assist with internal and external audits relating to information security and ensure timely assessment and treatment of security risks.
Ensure information security and privacy risks are either treated or accepted in accordance with the risk appetite.
Ensure periodic information security and privacy risk assessments of key services, third parties and regulatory commitments are performed, and remediation plans are monitored.
Work with other stakeholders (e.g. IT, Software Development and Quality Management teams) to identify and assess Information Security risks and agree the actions to mitigate or monitor and improve their controls.
Conduct security control assessments as relevant to security and privacy to identify compliance control gaps, work with process owners to determine corrective action plans, and support the integration of a security controls framework.
Use the output of Information Security and privacy assessments to identify control gaps and weaknesses and provide direction to strategy and change programs to improve control efficacy.
Assist with the creation, maintenance, and delivery of information security and privacy awareness training for colleagues.
Monitor and record compliance with operational security standards and procedures.
Support Legal and Compliance teams e.g. Data Protection and Privacy, as regards to information security risks.
Understand the external security and privacy environment and emerging trends to support information security management.

What You'll Bring

The knowledge and mindset you will bring to our team include the following:

A passion for the healthcare industry, as well as novel technologies such as AI and advanced computing.
Experience applying defined risk management methodologies and frameworks
Good risk, governance and compliance understanding
A passion for cybersecurity and a keen interest in risk management
Experience in security/infrastructure protection and information security management or a postgraduate/master's degree in cyber security
Ideally a formal InfoSec and/or privacy accreditation/qualification (ISO 27001 and/or GDPR, HIPAA being a plus)
Up to date knowledge of evolving Infosec threats and risk management
An understanding of the cyber security and privacy risks associated with healthcare organizations and ways to manage them
Analytical and problem-solving skills to identify and assess risks, threats, patterns, and trends
Excellent attention to detail
Excellent project management skills and the ability to adapt to a fast-paced, agile environment with changing priorities.
Strong communication and critical thinking skills.
Excellent people and management skills to interact with staff, colleagues, cross-functional teams and third parties.
Eagerness to learn about new trends, tools, and technologies, and to continually consider how these will influence our products.
Open to receiving and giving feedback to elevate team performance.

Who We Are

We are a world-class group of intellectually diverse, curious professionals, dedicated to affecting meaningful change for patients and their health outcomes by empowering frontline care workers with scalable, intelligent technology. Our teams include health care experts, machine learning scientists, and software developers who are dedicated to empowering frontline care workers. Our team creates and deploys ground-breaking, responsibly developed AI solutions for use within our own clinics, and in clinical practices around the world. We are driven by our belief in continual personal growth and the absolute importance of rigorous science. By merging the unbounded potential of AI with the irreplaceable insights of human experience and empathy, we are establishing a new standard of care for how diagnostics and treatment are performed worldwide and realizing our goal of better care for everyone, everywhere.

Why Work at Synthesis Health?

At Synthesis, we are eager to meet bright minds in a variety of different fields to help us realize our goal of transforming health care worldwide. We are committed to creating an inclusive, welcoming environment where employees with different backgrounds, abilities, and perspectives are welcomed and empowered to grow their careers. We offer many opportunities for development, advancement, and learning while being able to contribute to impactful work in a culture of innovation. By joining Synthesis Health, you will have a chance to be part of a diverse and collaborative team and enjoy perks that include eligibility to take part in our Options Plan, full health and wellness benefits, extra-long long weekends, plenty of social events, and flexible distributed workplace options.

Synthesis Health

New Jobs

Information Security and Privacy Analyst