Chief Information Security Officer (CISO)

OUR CARE VALUESHoan My is guided by our CARE values: Commitment to Quality Care, Accountability for Outcomes, Respect for Our Communities, and Empathy with Our Patients. These principles shape how we work and how we treat one another. We seek people who put these values into practice and show excellence, innovation, and integrity in their work.JOB SUMMARYLead Hoan My’s Group cybersecurity strategy, governance, risk, controls and security operations across hospitals, clinical systems, patient data, digital health and AI. Build and lead the Group Cyber Security team and deliver the approved three-year cybersecurity programme. Act as the Group’s information security authority, defining security requirements and ensuring effective implementation across the technology environment. Provide hands-on leadership in threat detection and response, incident management, AI, digital platform and clinical-system security within a 24/7 healthcare environment. Report security posture and key risks to the CTO, Executive Committee and Board, ensuring risks are owned, addressed and closed to support informed investment and risk decisions.MAIN RESPONSIBILITIESCybersecurity Strategy & Governance: Own the Group cybersecurity strategy, governance framework, policies, standards, risk appetite and three-year roadmap, aligned with healthcare, legal, regulatory and information security requirements.Risk, Compliance & Assurance: Own the Group security risk register, control environment, information classification and asset assurance; ensure compliance with Vietnam’s data protection, cybersecurity, healthcare and AI regulations, and lead security reporting, audits and regulatory engagement.Security Operations & Incident Response: Lead 24/7 security operations, detection, threat intelligence, threat hunting and end-to-end incident response, including ransomware, data breaches, third-party and medical-device incidents, with appropriate forensic readiness and executive escalation.Technology, Clinical & Digital Security: Set and assure security requirements across identity, endpoint, network, application, cloud, data, digital platforms, payment services, clinical systems and medical devices, ensuring cyber resilience and continuity of patient care.AI & Third-Party Security: Own AI security governance across the AI lifecycle and manage cybersecurity risks from AI-enabled services, external model providers, vendors and third parties, including security assessments, contractual controls and supply-chain resilience.Leadership, Programme & Investment: Build and lead the Group Cyber Security team, drive security awareness and capability development, deliver the approved cybersecurity programme, and manage security budget, resources, insurance and investment priorities.JOB REQUIREMENT & QUALIFICATION15+ years of cybersecurity experience, with senior leadership experience in complex, regulated or healthcare environments.Strong expertise in cybersecurity strategy, GRC, risk, compliance, security architecture and security operations, with hands-on technical depth.Proven experience in SOC/SIEM, incident response, threat management, IAM/PAM, cloud, application, network and clinical/medical device security.Strong knowledge of ISO 27001, NIST, MITRE ATT&CK, OWASP and relevant cybersecurity/data protection regulations; Vietnam regulatory experience is a plus.Demonstrated leadership in AI security & governance, cyber transformation programmes, third-party risk, security budgets and building high-performing security teams.Excellent English communication and executive stakeholder management, with the ability to engage effectively with the CTO, Board, regulators and international partners; CISSP/CISM/CISA/CRISC or equivalent preferred.Thank you for your interest in career opportunities at Hoan My Medical Corporation.Candidates whose qualifications match our hiring requirements will be contacted within 14 days for the interview process. We appreciate your interest in joining Hoan My Medical Corporation. If you are not selected for this role, your application will remain in our candidate database for consideration for future opportunities.