IT Governance and Security Specialist

Do you have a curious mind that's always eager to learn and grow? Do you thrive on unravelling complexities and turning challenges into meaningful solutions? We're searching for someone who isn't just looking for a job but is passionate about making a real impact in the Health Tech space where security and privacy aren't just buzzwords—they're essential to everything we do.

At VALD, we're revolutionizing healthcare through technology, and are seeking an IT Governance and Security Specialist who can bring fresh ideas to the table, simplify the intricate, and isn't afraid to get hands-on along the way. You might be a recent graduate brimming with enthusiasm for cybersecurity or someone who has explored IT policies and found a passion for protecting sensitive information.

Regardless of your background, you are driven by curiosity and a desire to learn. You're the type of person who asks 'why' and doesn't stop until you've found the answer. You embrace challenges as opportunities to grow and are excited about the prospect of safeguarding our clients' data in an industry where security and privacy are paramount.

In this role, you'll collaborate with diverse teams, inspire broader thinking, and contribute to building out core governance processes. You'll immerse yourself in supporting our client sales process, running engaging security awareness programs, conducting third-party security reviews, user access audits and managing policies to keep our organisation ahead of the curve.

We value diverse perspectives and believe that innovation comes from combining different viewpoints and experiences. If you're ready to embrace challenges, learn continuously, and contribute to a team that's transforming healthcare, we'd love to meet you. Join us, and let's let's shape the future of healthcare technology together.

**What you will do**
- Assist in developing and conducting security awareness programs, including phishing simulation campaigns and promote a culture of security mindfulness among employees.
- Support the scheduling and coordination of penetration testing activities with external vendors. Learn to review findings and track remediation efforts to internal SLAs.
- Ensure organisational policies and reviewed and updated in accordance with our compliance obligations and that policies and effectively communicated to and adopted by all staff.
- Manage the third-party vendor assessment process, including conducting risk assessments and security assessments.
- Aid in performing regular reviews of user access rights to ensure proper access controls. Collaborate with business and technology stakeholders to address any discrepancies.
- Assist in preparing monthly reports on security metrics and governance activities. Learn to analyse data and present insights to senior management.
- Support the administration of the Vanta compliance platform and help monitor compliance with relevant security frameworks and regulations.
- Support VALD's sales process by completing client security questionnaires and look for opportunities to streamline and automate, including with the use of AI, this process.
- Help administer the enterprise risk management process
- Support the coordination of internal and external audits and assist in gathering documentation and tracking audit findings.
- Respond to ad doc security and governance-related inquiries from our clients or from within the business
- Take initiative in finding solutions and improving processes.

**Is this you?**
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field. Recent graduates are encouraged to apply.
- 0-2 years of experience in IT governance, information security, or related fields.
- Internships, projects, or coursework in cybersecurity or IT governance are a plus.
- Key Traits_
- Curiosity: A strong desire to understand and ask why.
- Willingness to Learn: Open to feedback and eager to develop new skills.
- Proactive Attitude: Takes initiative in tasks and seeks out opportunities for improvement.
- Adaptability: Ability to handle ambiguity and thrive in a startup environment where things aren't always well defined.
- Skills & Competencies_
- Basic understanding of IT governance and security concepts.
- Familiarity with security frameworks (e.g., SOC2, ISO 27001) is advantageous.
- Strong analytical and problem-solving abilities.
- Good communication skills, both written and verbal.
- Ability to work well in a team environment.
- High attention to detail and organizational skills.
- Proficiency with Microsoft Office Suite (Word, Excel, PowerPoint).

**_Why VALD?_**
- Competitive market salary in a down-to-earth, inclusive, and vibrant work environment.
- Dedicated training budget.
- Learn from a range of high-performing individuals and teams across a range of disciplines.
- Chefs that prepare you delicious fresh breakfast and lunch Monday through Friday.
- On-site barista to make your coffee just as you like it.
- Conven