Security Governance Specialist, Docplanner
Information Security Team
Booking platform and management software provider for doctors
Be an early applicant
Booking platform and management software provider for doctors
1001+ employees
Be an early applicant
1001+ employees
Company mission
To help people live longer, healthier lives.
Role
Who you are
- ISO 27001 Lead Auditor or Implementer certification is highly desirable (but not essential)
- Experience leading or taking part in internal and or external audits
- 5+ years of experience in information security governance
- Knowledge of relevant security standards and frameworks (e.g., ISO 27001, NIST, SOC 2)
- Experience of continuous compliance tooling (eg Vanta or Drata)
- Strong understanding of regulatory requirements, such as GDPR
- Excellent communication and collaboration skills, with the ability to work across various departments
- Strong analytical and problem-solving skills
- Detail-oriented with a commitment to maintaining accuracy in documentation
- Ability to adapt to a dynamic and fast-paced environment
- Self-starter and free thinker
What the job involves
- The Security Governance Specialist is a critical member of the Information Security team responsible for developing and maintaining the governance framework, policies, procedures, and standards that guide the organization's information security practices. This role plays a pivotal role in ensuring that security efforts align with business objectives and comply with relevant regulations and industry standards
- Develop and maintain information security policies, procedures, and standards in alignment with industry best practices, regulatory requirements, and organizational goals
- Collaborate with stakeholders across the organization to ensure policies meet business needs while maintaining security standards
- Establish and manage the security governance framework, ensuring consistency and accountability in security practices
- Define and communicate governance-related roles and responsibilities within the organization
- Assist in identifying and understanding regulatory requirements and standards relevant to the organization (e.g., SOC 2, ISO 27001)
- Ensure that security practices and policies align with compliance requirements and facilitate compliance assessments and audits
- Contribute to the development of security awareness programs and training materials
- Collaborate with the Security Awareness and Training Specialist to educate employees about security policies and best practices
- Maintain a repository of security policies, procedures, and standards
- Prepare and distribute reports on compliance status, governance efforts, and security metrics to management
- Integrate risk management principles across the business
- Ensure that security governance efforts address identified risks appropriately
- Stay informed about emerging security threats, regulations, and best practices
- Propose and implement improvements to the security governance framework based on industry trends and organizational needs
- Integrate with Tech and Product teams to identify and assess new development initiatives or projects
- Bridge communication between the security and engineering teams ensuring needs and expectations are understood and managed
Our take
Healthcare platform Docplanner has become a major player in the European healthtech market in the decade since it was founded. The company offers a suite of administrative tools for over 22M patients and around 2M doctors worldwide, including workflow digitisation and appointment booking services. The company currently operate in 13 countries, hit Unicorn status in 2021, and has been riding a recent wave of digital transformation and workforce overburdening in the healthcare sector which has spurred on demand for precisely the kind of services they provide. So it’s safe to say business is going well.
What is most compelling about Docplanner’s business journey has been its long-brewing competition with their direct competitor, the fellow Unicorn and better-funded Doctolib. The tête-à-tête with this French/German rival has seen both parties making aggressive European expansion with national acquisitions - Doctolib in Italy, France, and Germany; Docplanner in Turkey, Poland, Spain, and Latin America. With Docplanner’s 2021 acquisition of German parallel platform Jameda, however, they are making moves on Doctolib’s home turf. The company has also acquired MyDr, a leading Polish tech solutions provider.
These broad consolidation moves represent a maturation of the healthtech market which will serve both competitors well. Docplanner is certainly a key and aggressive contender in this race - and this company isn't going anywhere any time soon.
Freddie
Company Specialist at Welcome to the Jungle
Insights
11% employee growth in 12 months
Company
Funding (last 2 of 6 rounds)
May 2019
$94.4m
SERIES E
May 2017
$17.7m
SERIES D
Total funding: $147.6m
Company benefits
- English classes
- Stock Option plan
Company HQ
De Weteringschans, Amsterdam, Netherlands
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at Docplanner