Risk and Governance Engineer
About the role
The Risk and Governance Engineer will play a key role in strengthening the company's security posture, ensuring compliance, and mitigating risk within the healthcare sector. Responsibilities include safeguarding data and systems, collaborating with teams, turning insights into actionable recommendations, and driving innovation to build resilience. The role requires a bachelor's degree in a relevant field, strong knowledge of risk management frameworks, hands-on experience with penetration testing, and the ability to interpret technical risks for management. The position is with Innobot, a company focused on automating healthcare and elevating impact.
Must have
- Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or related field.
- Strong knowledge of risk management frameworks and security best practices.
- Hands-on experience with penetration testing and vulnerability assessment tools.
- Understanding of compliance frameworks (HIPAA, SOC 2, ISO 27001, NIST CSF).
- Experience preparing detailed reports and presenting risk insights to management.
- Ability to interpret technical risks and translate them into actionable business recommendations.
- Strong analytical, documentation, and problem-solving skills.
- Excellent communication and cross-functional collaboration abilities.
Nice to have
- Certifications such as CEH, OSCP, CompTIA Security+, CISSP, CISA, or ISO 27001 Lead Implementer.
- Experience with SIEM solutions and log analysis (e.g., Splunk, Sentinel).
- Familiarity with cloud security (Azure, AWS, GCP).
- Knowledge of ESG frameworks such as GRI, SASB, or ISO 26000.
- Experience developing automated workflows for risk assessments or compliance tracking.
- Understanding of DevSecOps practices and secure SDLC.
- Exposure to data privacy and governance tools (DLP, CASB, MDM, EDR).
- Ability to lead training and awareness programs on security and governance topics.
Technologies
- AWS
- Azure
- CEH
- CISSP
- Cloud Security
- CompTIA Security+
- Cybersecurity
- DevSecOps
- DLP
- EDR
- GCP
- ISO 27001
- MDM
- NIST
- OSCP
- Penetration Testing
- SDLC
- SIEM
- SOC 2
- Splunk
Highlights
Applicants are encouraged to send their CV to careers@innobothealth.com. The company emphasizes a purpose-driven team environment where security, governance, and innovation are central. No information is provided about visa sponsorship, remote work, or specific location requirements.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka