IT & Cybersecurity Manager

Learn about knok

At knok, we dare to lead and humanise the digital transformation of healthcare. We envision a world where everyone has timely access to quality healthcare through digital technology, creating a more equal society. We genuinely believe in it, and you can recognise it in every person who embraces this mission.

Through a Digital Front Door strategy, knok connects patients, providers and healthcare professionals in one place. Our API-first white-label platform enables a continuous, engaging and personalised healthcare experience for all conditions through a cutting-edge Patient Journey Engine.

With regular clinical practice as our main source of knowledge, we leverage ready-to-use data to improve care automation and increase financial savings. Since 2015, we have enabled more than 2.5 million clinical interactions in over 12 countries. Our platform is scalable and AI-ready, enhancing the power of data-driven care to deliver better outcomes during all stages of life.

Are you ready to join us in revolutionising healthcare and making a tangible impact on people's lives?

About the role

We are looking for an IT & Cybersecurity Manager to lead knok’s IT infrastructure and security landscape. You will ensure the reliability, scalability and security of our systems, while maintaining compliance with regulatory standards. As part of the IT & Cybersecurity team, you will own and evolve our Information Security Management System (ISMS), drive security best practices across the organisation, and support business growth through a secure and efficient technology environment. You will also lead and develop the IT & Cybersecurity function, building a strong foundation for scale. If this makes sense, keep reading!

As an IT & Cybersecurity Manager, you will:

• Lead IT and cybersecurity operations, ensuring the implementation of the strategy in line with the company’s existing security policies;
• Maintain the IT and cybersecurity infrastructure, ensuring procedures are followed and regular tasks are carried out (e.g. periodic security reviews, inventory management and updates, vulnerability management);
• Prepare, coordinate and conduct regular audits, including Internal Audits, Penetration Tests, ISO 27001, and others as required as the business evolves;
• Ensure all systems are operational, efficient in resource usage, and do not compromise day-to-day operations, focusing on performance and reliability;
• Act as the main point of contact with vendors; manage procurement of hardware and software, and support the implementation of new projects ;
• Design and continuously review IT and cybersecurity policies and procedures;
• Manage, monitor and implement controls to ensure compliance with the company’s cybersecurity requirements;
• Act as the point of contact for legal matters, ensuring compliance with all applicable regulatory requirements, including interaction with data subjects regarding their rights; regularly review legal documentation, policies and procedures (e.g. RoPA, DPIA, NIS2, AI Act);
• Deliver the cybersecurity training plan, including phishing simulations, in-person training sessions, and onboarding sessions for all new employees;
• Serve as the main point of contact for all departments on IT and cybersecurity matters; provide occasional support outside standard working hours;
• Develop and test Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP), with a strong focus on critical systems; define and ensure RPOs and RTOs;
• Manage Identity and Access Management (IAM), including periodic reviews, enforcement of the principle of least privilege, and privileged account management;
• Collaborate with the Tech team on secure SDLC processes and vulnerability management.

About you

To be considered for this role, here are the skills we’re looking for:

• Education: Degree in Computer Science, Information Technology, Cybersecurity or similar
• Experience:
• Proven experience in IT management and cybersecurity, including team leadership or mentoring responsibilities
• Proven experience leading end-to-end ISO 27001 certification processes, including implementation, audit and ongoing compliance
• Technical knowledge:
• Strong understanding of IT infrastructure, networks and systems
• Experience with cloud environments and architectures (preferred)
• Solid knowledge of cybersecurity principles, risk management and compliance frameworks (e.g. ISO 27001)
• Leadership & People skills:
• Experience leading or mentoring teams, with the ability to develop and grow others
• Strong sense of ownership and accountability
• Ability to prioritise, structure work and drive execution
• Communication: Ability to communicate technical topics clearly to different stakeholders across the organisation
• Languages: Fluent in Portuguese and proficient in English