The Digital Health Agency (DHA) is a government body dedicated to transforming healthcare delivery through the integration of cutting-edge digital technologies. Our mission is to enhance healthcare accessibility, improve patient outcomes, and ensure data security by developing and maintaining a comprehensive digital health ecosystem across Kenya.

Responsibilities

• Developing a road map for standards adaption with clear objectives, priorities, timelines and capacity building on the standards;
• Developing and implementing a compliance plan;
• Recognizing and rewarding compliance and digital health standards and guidelines;
• Developing the scope of risk assessment through mapping potential risks and collecting insights from audit systems logs and user feedback;
• Developing risk mitigation strategies by implementing preventive measures, detection mechanisms and collaboration with vendors to address compliance and technical vulnerabilities;
• Developing an assessment framework and perform compliance assessments by assessing existing policies and procedures, assess security and privacy audits, assess interoperability assessment and evaluation for compliance with legal requirements;
• Categorizing compliance issues into process related technical and compliance related issues;
• Conducting detailed investigations covering certification criteria, validity, claim, root cause analysis and prepare detailed reports- move to certification;
• Defining audit objectives covering purpose and focus areas for audit;
• Developing mapping of stakeholders needs;
• Developing a knowledge base that includes; standards and guidelines, resource materials and regular updates into the knowledge base;
• Developing risk mitigation strategies by implementing preventive measures, protection mechanisms and collaborate with vendors to address compliance and technical vulnerabilities;
• Developing and regularly reviewing guidelines and regulations to stay aligned with emerging technologies and needs;
• Establishing systems for monitoring and adherence to policies and standards;
• Coordinating systems monitoring to ensure compliance and drive Improvements.

Requirements

• Cumulative period of fifteen (15) years relevant work experience, three (3) of which should have been in the grade of Assistant Director, Digital Health or in an equivalent or in a comparable position;
• Bachelor's degree in any of the following disciplines: - Health Information Technology, Health Records and information Science, Health Systems, Information Communication Technology, Pharmacy, Epidemiology, Clinical Medicine, Nursing, Nutrition, or equivalent qualification from a recognized institution.
• Master's degree in any of the following disciplines: - Health Informatics, Health Information Systems, Health Records and Information Science, Information Communication Technology, Epidemiology, Health Economics and Policy, Statistics, Biostatistics, Health Systems, Data Science and Analytics, Computer Science; or equivalent qualification from a recognized institution.
• Registered and Licensed by a recognized regulatory body where applicable;
• Certificate in Leadership course lasting not less than four (4) weeks from a recognized institution;
• Professional certification in Project Management Professional (PMP) or PRINCE2 Practitioner is an added advantage;
• Proficiency in computer applications;
• Demonstrated experience in project management, preferably within ICT digital transformation or public-sector programmes is an added advantage; and
• Demonstrated merit and ability as reflected in work performance and results.

• Developing a road map for standards adaption with clear objectives, priorities, timelines and capacity building on the standards
• Developing and implementing a compliance plan
• Recognizing and rewarding compliance and digital health standards and guidelines
• Developing the scope of risk assessment through mapping potential risks and collecting insights from audit systems logs and user feedback
• Developing risk mitigation strategies by implementing preventive measures, detection mechanisms and collaboration with vendors to address compliance and technical vulnerabilities
• Developing an assessment framework and perform compliance assessments by assessing existing policies and procedures, assess security and privacy audits, assess interoperability assessment and evaluation for compliance with legal requirements
• Categorizing compliance issues into process related technical and compliance related issues
• Conducting detailed investigations covering certification criteria, validity, claim, root cause analysis and prepare detailed reports- move to certification
• Defining audit objectives covering purpose and focus areas for audit
• Developing mapping of stakeholders needs
• Developing a knowledge base that includes; standards and guidelines, resource materials and regular updates into the knowledge base
• Developing risk mitigation strategies by implementing preventive measures, protection mechanisms and collaborate with vendors to address compliance and technical vulnerabilities
• Developing and regularly reviewing guidelines and regulations to stay aligned with emerging technologies and needs
• Establishing systems for monitoring and adherence to policies and standards
• Coordinating systems monitoring to ensure compliance and drive Improvements

• Project Management
• Risk Assessment
• Compliance Management
• Audit Systems
• User Feedback Analysis
• Risk Mitigation
• Preventive Measures
• Detection Mechanisms
• Vendor Collaboration
• Technical Vulnerabilities
• Assessment Framework Development
• Policy Assessment
• Procedure Assessment
• Security Audits
• Privacy Audits
• Interoperability Assessment
• Legal Requirements Compliance
• Root Cause Analysis
• Audit Objectives Definition
• Stakeholder Needs Mapping
• Knowledge Base Development
• Standards and Guidelines
• Resource Material Development
• Emerging Technologies Alignment
• Policy Monitoring
• Standards Adherence
• Systems Monitoring
• Process Improvement
• Proficiency in computer applications

• Bachelor's degree in Health Information Technology, Health Records and information Science, Health Systems, Information Communication Technology, Pharmacy, Epidemiology, Clinical Medicine, Nursing, Nutrition, or equivalent qualification from a recognized institution
• Master's degree in Health Informatics, Health Information Systems, Health Records and Information Science, Information Communication Technology, Epidemiology, Health Economics and Policy, Statistics, Biostatistics, Health Systems, Data Science and Analytics, Computer Science; or equivalent qualification from a recognized institution
• Registered and Licensed by a recognized regulatory body where applicable
• Certificate in Leadership course lasting not less than four (4) weeks from a recognized institution
• Professional certification in Project Management Professional (PMP) or PRINCE2 Practitioner is an added advantage
• Demonstrated experience in project management, preferably within ICT digital transformation or public-sector programmes is an added advantage