Information Security Officer

About the role

The Department of Medical Informatics (DMI) at LIH is looking for an experienced Information Security Officer to join its IT Strategy & Management Unit. You will help design, implement and continuously improve an Information Security Management System (ISMS) that supports multidisciplinary health research while complying with European and national regulations.

Key responsibilities

• Assist the Information Security Manager in developing, documenting and maintaining security policies, procedures and processes.
• Support the design, deployment and operation of the ISMS in line with ISO 27001 and related standards.
• Coordinate with department heads to ensure effective implementation of security controls across research and operational workflows.
• Conduct IT risk assessments, manage security incidents and drive continuous improvement of security processes.
• Perform routine compliance reviews and identify areas for enhancement.
• Deliver training and onboarding sessions to raise security awareness among staff.

Required profile

• Proven experience in information security within a research or healthcare environment.
• Strong knowledge of European regulations such as GDPR, NIS2, EHDS and the AI Act.
• Familiarity with quality standards like ISO 9001, ISO 17025 and Good Clinical Practice (GCP).
• Ability to work collaboratively with cross‑functional teams.

Required skills

• ISO 27001 / ISO 27000 framework
• NIS2 compliance
• GDPR
• European Health Data Space (EHDS)
• AI Act
• ISO 9001
• ISO 17025
• Good Clinical Practice (GCP)
• Information Security Management System (ISMS) implementation
• IT risk assessment and incident management