简体中文 
English 
在菲律宾首屈一指的医疗保健中心崇华医院，发挥影响力，提升您的职业生涯！
Chong Hua Hospital is lookinf to hire an Information Security Engineer who provides the vision and strategies necessary to ensure the confidentiality, integrity, and availability of CHH electronic information by communicating risk to senior administration, creating and maintaining enforceable policies, supporting processes, and ensuring compliance with regulatory requirements. S/he makes these possible through coordinating activities with all CHH hospital staff, including the evaluation, procurement, deployment of security-related products, develops and coordinates information security awareness programs. Additionally, s/he ensures the hospital system-wide disaster recovery and incident response plans are in place
工作职责和责任
Creates and implements information security policies, strategies, both short-term and long-range, in support of the CHH hospital management goals.
- Directs an ongoing, proactive risk assessment program for all new and existing systems and remains familiar with the CHH’s goals and business processes so effective controls can be put in place for those areas presenting the greatest information security risk.
- Communicates risks and recommendations to mitigate risks to the senior leadership team by communicating in non-technical, cost/benefit terms so decisions can be made to ensure the security of information systems and information entrusted to both Chong Hua Hospital Cebu and Mandaue.
- Oversees all ongoing activities related to the development, implementation, and maintenance of the CHH’s information security policies and procedures by ensuring these policies and procedures encompass the overall security of electronic information at rest or in motion within the hospital in process and procedure development, ensuring they are not in conflict with CHH policies.
- Assists CHH hospital staff to ensure regulatory compliance in areas such as the Electronic Payment- Data Security Standards (PCI-DSS) or the Health Insurance Portability and Accountability Act (HIPAA), and works with CHH Data Privacy Officer to ensure full compliance in securing Protected Health Information (PHI).
- Ensures vulnerabilities are managed by directing periodic vulnerability scans of servers connected to CHH Cebu and Mandaue networks
- Develops information security awareness training programs, and works with CHH departments to present them to hospital staff as appropriate, ensuring adherence to best practices.
- Acts proactively to prevent potential disaster situations by ensuring that proper protections are in place, such as intrusion detection and prevention systems, firewalls, and effective physical safeguards, and provides for the availability of computer resources by ensuring a business continuity/disaster recovery plan is in place to offset the effects caused by intentional and unintentional acts.
- Contributes to a work environment that encourages knowledge of, respect for, and development of skills to engage with those of other cultures or backgrounds.
- Continuously monitor security events, using security information and event management (SIEM) or any monitoring tools available to detect suspicious activities.
资格
Must possess at least a bachelor’s degree in engineering (Computer/Telecommunications), Computer Science, Information Technology or equivalent.
- With at least five (5) years of relevant work experience Information Technology in a business environment.
- 有医疗保健行业经验者优先。
- Professional Certification: (CEH, Certified Cyber Security Analyst, NSE Certified, Certified CompTIA Security + etc.) One of the security certifications is required.
- Experience with information systems in a 24×7, “real-time” environment supporting a service delivery organization.
- Experience in virtualization technologies (VMWare & Hyper-V) to apply to hardware, software, memory, storage, data and network, an advantage.
- Ability to work with the technical resources, understand customers’ needs and translate these needs into efforts to deliver the final solution; customer service driven with a problem resolution focus.
- Knowledge of applicable data privacy practices and laws as they relate to technology issues
- Must be able to lift 35 lbs. of equipment unassisted
- Basic understanding of hospital standards (JCI, DOH Bench book, etc.); Knowledge of privacy regulations, ability to maintain patient privacy in daily role and other healthcare standards, an advantage.
- 证明对基本企业办公软件（包括 Microsoft Office 365 应用程序）的了解。
- 沟通能力出色。要求精通维萨亚方言和/或他加禄语。
