Elizabeth Glaser Pediatric AIDS Foundation
VACANCY ANNOUNCEMENT
Elizabeth Glaser Pediatric AIDS Foundation (EGPAF) is on a mission to create a world where no mother, child, or family is devastated by HIV and AIDS, and we are making an impact. We are a proven leader in the global fight to end HIV and AIDS, and an advocate for every child to live a full and healthy life into adulthood. For more than 30 years, EGPAF has been a leader in meeting urgent needs in pediatric HIV and AIDS in the world’s most affected regions. We carry out our values of passion, innovation, teamwork, leadership, integrity, excellence and equity every day, while maximizing our impact in the communities we serve. EGPAF currently supports national, district, and local governments, facilities, communities, and non-governmental partners. In 2020, EGPAF’s global footprint spans 15 countries. To date, EGPAF has supported over 15,000 sites to offer HIV counselling, prevention, diagnosis, and treatment services alongside high-quality family health care. Join us on our fight for an AIDS-free generation!
EGPAF has worked in Malawi since 2001. Today, EGPAF Malawi implements evidence-based HIV prevention, care and treatment interventions in 177 health facilities in nine districts through EGPAF’s U.S. President’s Emergency Plan for AIDS Relief/U.S. Centers for Disease Control and Prevention (PEPFAR/CDC) – funded Achieving HIV Epidemic Control through Scaling Up Quality Testing, Care and Treatment in Malawi.
EGPAF seeks to fill the following open position
Title : Technical Advisor: Digital Health Data Security and Governance
Reports to : MOH Digital Health Division Lead,
Seconded to Ministry of Health Digital Health Division Collaborates with E Government
Supervised by : Project Director, Health Information Systems
How will you fight for an AIDS-free generation?
The TA under the leadership of the MOH – Division of Digital Health will oversee the design and execution of digital data governance strategy (security, privacy and). The TA will also lead in supporting MOH to operationalize / the implementation of the data governance for stakeholders and MOH related digital data domains. Build and support ongoing operations, systems, and practices (technical and behavioral) that align with the digital data governance plan within the Ministry of Health. Deep understanding of modern data governance methods, especially in big data platform and architecture with sensitive data sets.
No two days are alike at EGPAF, but what can you expect in this role?
Support the development and maintenance of a best practice information security accountability framework for Digital Health Division within MOH ensuring compliance with all relevant departmental and government policies, standards and guidelines.
Evaluate existing processes and ensuring alignment to both services at MOH and national regulations.
Support the development and evaluation of MOH ICT security, and governance
Support the implementation of security strategies both within Digital Health in MOH and stakeholder/ partners
Work with the technical team in engineering, implementing and monitoring security measures for the protection of computer systems, networks and information. Designing computer security architecture and develop detailed cyber security designs.
Work with the Policy Development and Implementation team in to prepare, review and/or document standard operating procedures and protocols.
Identify technical solutions and security tools to help mitigate security vulnerabilities and automate repeatable tasks.
Ensure Data users are adhering to data security policies e.g., data disposal, data access, data sharing
Provide expert advice, support and recommendations on the implementation of the information security accountability framework and privacy impact assessments, to stakeholders, service providers supporting Digital Health in Malawi
Manage and undertake investigations and analysis and develop and deliver expert assessments, recommendations and reports to management to ensure security needs are continuously met.
Lead a partnering approach to the identification, development and implementation of security plans that facilitate clinical and system implementation and management in alignment with Digital Health security requirements.
Establish and maintain positive partnerships and relationships with management, staff, clinicians, key stakeholders and service providers, across the division to support ICT security and governance strategies and projects.
Develop, implement and review engagement and communications strategies to facilitate engagement with clinical, non-clinical and technical groups, ensure enterprise wide understanding of information security risks and foster co-operation on the implementation of controls.
To be successful, you will need to have:
- 2-5 years’ experience in a similar role is a plus.
- BS degree in Information technology, Business information systems or Computer Science or related field
- Proven work experience as a System Security Engineer or Information Security Engineer
- Hands on experience in security systems, including firewalls, intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
- Experience with network security and networking technologies and with system, security, and network monitoring tools
- Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols
- Strong understanding of databases and data structures.
- Strong analytical and time management skills.
- Excellent written and verbal communication skills (English) in both technical and nontechnical communications.
- Ability to creating good design documents and presentations (PPT).
- Ability to compare technologies and make recommendations to senior management.
- Have a good knowledge of encryption and tunneling protocols (VPNs etc. …)
- Have a good knowledge of application delivery protocols (HTTP/HTTPS, HTTP2, etc.) and applicable security controls (DNS filtering, URL filtering, Data Classification. DLP, etc.). Certificate in any application security area is a plus.
- Ability to foster success through a professional appearance, being courteous to customers with positive attitude.
As a global, multinational and multicultural organization, EGPAF believes that diversity in the workplace enriches our work and enhances our impact and effectiveness. We believe that employees have the right to work in a climate of mutual respect and integrity that promotes dignity and respect for all, and that enables them to reach their full potential. The Foundation is committed to advancing diversity, equity, inclusion, and belonging (DEI&B), and we strongly encourage those with the following identities to apply: BIPOC (black, indigenous, and other people of color), women and non-binary, LGBT+ (lesbian, gay, bisexual, and transgender), individuals with disabilities, and other members of historically underrepresented groups.
EGPAF is an equal opportunity employer and affords equal opportunity to all employees and applicants for employment regardless of race/ethnicity, color, religion, sex (including pregnancy, gender identity, gender expression, and sexual orientation), national origin, age, disability or genetics. In addition to country law requirements, EGPAF complies with US laws governing nondiscrimination in employment in every location in which the Foundation has facilities.
The Foundation does not charge any fees at any stage of the recruitment process. If you are asked to pay a fee at any stage of recruitment, please contact fraud@pedaids.org .
Method Of Application
Interested qualified candidates should send their expressions of interest, enclosing copies of their certificates and a detailed current Curriculum. Qualified women are encouraged to apply.
To apply log onto EGPAF webpage: https://www.pedaids.org/about/careers
Closing date: February 6, 2023