Senior Cybersecurity Engineer

About the role

Thomson Medical is undergoing a digital transformation and seeks a Senior Cybersecurity Engineer to protect its systems, data, and digital assets. The role will lead security initiatives across infrastructure, applications, and cloud environments, ensuring robust protection and compliance.

Key responsibilities

• Design, implement and manage security controls across the enterprise.
• Lead security awareness programs, including training sessions and phishing simulations.
• Conduct enterprise‑wide risk assessments, identify weaknesses and drive remediation.
• Plan and oversee vulnerability assessments, penetration testing and security audits, coordinating with internal teams and external vendors.
• Develop and enforce security frameworks, policies, standards and procedures aligned with regulatory requirements.
• Monitor security tools to detect and respond to intrusions, suspicious activity and threats.
• Lead incident response activities, from escalation to root‑cause analysis and post‑incident reporting.
• Maintain documentation, evidence and metrics for governance, compliance and audit purposes.

Required profile

• Proven experience in a senior security role within a complex, regulated environment.
• Strong analytical mindset with the ability to assess risk and prioritize remediation.
• Excellent communication skills to advise technical and business teams.
• Up‑to‑date knowledge of emerging threats, vulnerabilities and attack techniques.

Required skills

• Vulnerability assessment and management
• Penetration testing coordination
• Security monitoring and SIEM tools
• Incident response and root‑cause analysis
• Security framework development (e.g., NIST, ISO 27001)
• Regulatory compliance and audit support