Healthcare Information Security Administrator

Join Our Team Oowlish, one of Latin America's rapidly expanding software development companies, is seeking experienced technology professionals to enhance our diverse and vibrant team. As a valued member of Oowlish, you will collaborate with premier clients from the United States and Europe, contributing to pioneering digital solutions. Our commitment to creating a nurturing work environment is recognized by our certification as a Great Place to Work, where you will have opportunities for professional development, growth, and a chance to make a significant international impact. We offer the convenience of remote work, allowing you to craft a work-life balance that suits your personal and professional needs. We're looking for candidates who are passionate about technology, proficient in English, and excited to engage in remote collaboration for a worldwide presence. About the Role: We are seeking an Information Security Administrator to support and strengthen the information security posture of a digital health technology organization operating in highly regulated environments. This role focuses on ensuring the confidentiality, integrity, and availability of clinical and patient data across connected healthcare systems and software platforms. Although the position is primarily remote, candidates must be based in Portugal and able to attend the office when required, particularly for documentation reviews, audits, and security-related activities that must be handled on-site. This role is ideal for a security professional with hands-on experience in HealthTech, SaMD, or clinical systems, who is comfortable working with compliance frameworks and operational security controls. Key Responsibilities:

Ensure information security controls are implemented, maintained, and properly documented

Manage day-to-day security operations, including:

Access control and user account lifecycle management

Security patch testing and implementation

Vulnerability scanning and remediation

Operation of security tools (IDS, IPS, firewalls, DLP)

System and network hardening

Secure remote access management

Cryptographic key management

Log collection, monitoring, and review

Identify, investigate, and manage information security incidents following established processes

Support internal and external audits related to information security and compliance

Collaborate with technical and non-technical stakeholders to ensure security best practices are followed

Must Have:

Proven experience in cybersecurity within HealthTech, SaMD, or clinical systems

Strong knowledge of security for connected healthcare devices and protection of clinical data

Experience working with European regulatory and compliance frameworks (e.g., GDPR, NIS2)

Familiarity with ISO 27001 and related compliance requirements

Degree in IT, Information Security, or a related field

Nice to Have:

Security-related certifications such as ISO 27001 Lead Implementer / Lead Auditor, CISSP, CISM, or CEH

Hands-on experience supporting ISO 27001 certification or audits

Training in ISO 27001:2002