Вакансія IT Security Specialist

It Security Specialist will analyse feature requests for eHealth and provide guidance regarding the security aspects and of forthcoming eHealth functionality. The security specialist will also carry out code review, provide security recommendations and system adjustments; assist CTO in estimating new features and with project management of IT development process.

Preferred Qualifications and Skills:

• BS or Bachelor's degree - Business, Engineering, IT, or related scientific/technical discipline - or equivalent relevant work experience;
• 3+ years of experience in business analysis/project management;
• Understanding the Software Development Process (SDLC);
• Proven experience in risk management in IT development process in frames of security;
• Ability to review technical code of eHealth system (general and security concerning questions);
• Experience in writing technical specifications (Tech tasks or SRS) for IT projects;
• Experience in modelling business processes (UML, BPMN is desirable);
• Experience in communication with customers (clarification of requirements, presentations);
• Experience in working with task management systems (task-tracking systems);
• English language at least Intermediate level;
• Ability to define, understand and translate business requirements into IT deliverables;
• Proven ability to handle multiple priorities and deadlines with no lack of quality;
• Being able to collaborate across internal and external partners and building relationships;
• Proven success with being self-motivated, enthusiastic and able to work independently;
• Experience working with GoU bodies and their representatives (preferably).

Indicative duties and responsibilities:

• Business analysis of feature requests from the MoH in scope of data transfer security: potential eHealth system adjustments to be aligned with the MoH policy; new functionality development (to support existing financing reform);
• Drafting/reviewing of technical documentation/technical tasks for new features and modules to be considered as a part of eHealth system – analysis of security issues;
• Project management of IT development process;
• Assisting CTO in reviewing new features: functional/ non-functional requirements (at least for contracting module – digital agreement between NHSU and PHC facility and additional system functionality) – to be aligned with current architecture and security mechanisms built-in the system;
• Assisting CTO in new features estimation, security issues consideration;
• Analysis of Medical Information Systems (MISes) integrated with eHealth Central Component in frames of security functions (to eliminate contractors fictitiousness and unreliability);
• To provide recommendation on 2-factor authorization feature usage for NHSU, State Owned Enterprise (SoE) eHealth, MoH departments (optional) (to determine level of information access and additional authorization step);
• To provide recommendation on fraud detection feature usage – access settings for different level of users: NHSU, SoE eHealth;
• Business analysis of all features that may affect security of eHealth system;
• Assisting CTO in CISS certification process: in the case of any required system adjustments – to provide business analysis of expected changes.

All submissions must include:

• Applicant’s CV;
• Applicant’s brief letter of interest indicated related experience and achievements.