Risk and Governance Engineer

Innobot Healthitpro.lk

Oct 27, 2026, 1:14 PM3h ago

Full-timeColombo

Apply on itpro.lk

About the role

The Risk and Governance Engineer will play a key role in strengthening the organization's security posture, ensuring compliance, mitigating risk, and building trust within the healthcare sector. Responsibilities include applying risk management frameworks, conducting penetration testing and vulnerability assessments, preparing detailed reports, and presenting risk insights to management. The role requires strong analytical and communication skills, as well as the ability to interpret technical risks and translate them into actionable business recommendations. The position is part of a team focused on security, compliance, and innovation in healthcare.

Must have

Bachelor's degree in Information Security, Cybersecurity, Computer Science, or related field.
Strong knowledge of risk management frameworks and security best practices.
Hands-on experience with penetration testing and vulnerability assessment tools.
Understanding of compliance frameworks (HIPAA, SOC 2, ISO 27001, NIST CSF).
Experience preparing detailed reports and presenting risk insights to management.
Ability to interpret technical risks and translate them into actionable business recommendations.
Strong analytical, documentation, and problem-solving skills.
Excellent communication and cross-functional collaboration abilities.

Nice to have

Certifications such as CEH, OSCP, CompTIA Security+, CISSP, CISA, or ISO 27001 Lead Implementer.
Experience with SIEM solutions and log analysis (e.g., Splunk, Sentinel).
Familiarity with cloud security (Azure, AWS, GCP).
Knowledge of ESG frameworks such as GRI, SASB, or ISO 26000.
Experience developing automated workflows for risk assessments or compliance tracking.
Understanding of DevSecOps practices and secure SDLC
Exposure to data privacy and governance tools (DLP, CASB, MDM, EDR).
Ability to lead training and awareness programs on security and governance topics.

Technologies

AWS
Azure
CEH
CISSP
Cloud Security
CompTIA Security+
Cybersecurity
DevSecOps
DLP
EDR
GCP
ISO 27001
MDM
NIST
OSCP
Penetration Testing
SDLC
SIEM
SOC 2
Splunk