Position: Cybersecurity Policy Expert for Digitalization of Public Health in Ukraine (eHealth)
Company: Agriteam Canada
Category: Security
Experience required: 3y
Published: 2020-05-01T00:00:00+03:00

Reform initiative and position summary:

The expert team will be deployed to the State-owned enterprise Electronic Health (SOE eHealth) at Ministry of Health (MoH) to continue the development of the central component of eHealth IT system and respective ecosystem.

The goal of the reform initiative is to provide government-guaranteed package of health care services of the enhanced quality to citizens of Ukraine for free.

For this reform, SURGe Project is looking for а Cybersecurity Policy Expert to ensure the security of a large, highly loaded system with sensitive data - eHealth.   

The expert will be based in Kyiv and will be reporting to the Team Lead.

Level of effort: Full time, Monday-Friday.

The duration of the contract is until 30 June 2020 with a possibility of extensions (subject of approval and implemented deliverables during a previous deployment).
For contracting (after the job offer is made), the selected candidate is expected to be registered as a Private Entrepreneur of the 3d group (consultancy services).

Indicative duties and responsibilities (scope of work):
1.	Development of eHealth CDB and medical information systems (MIS) security audit plan;
2.	Conducting eHealth CDB and MIS Security Audit for vulnerability search and preparation of audit
reports and guidelines;
3.	Conducting consultations on eHealth CDB and MIS IT security policy development projects;
4.	Creating a target profile on security;
5.	Incident response and conducting IT Incident Investigations;
6.	Conducting periodic security testing.

Preferred qualifications and skills:
1.	Higher education in the field of Informatics and Computer Science, Automation and Control,
Systems Sciences, Physical and Mathematical Sciences;
2.	Deep understanding of network protocols;
3.	Technical skills in both information security architecture and penetration testing;
4.	Deep understanding of ethical hacking;
5.	Scripting and programming experience is must;
6.	Ability to explain findings to non-technical professionals;
7.	Excellent report writing and presentation skills.