Revere Health

Security Engineer

• Execute the Security Program
• Translate security program plans into actionable projects and workstreams.
• Develop realistic schedules, track milestones, risks, and deliverables.
• Run regular working sessions and provide clear, concise status reporting.
• Drive Risk Management and Support Compliance
• Maintain the risk register in partnership with the Security Compliance function.
• Coordinate risk treatments with system and business owners and ensure follow-through.
• Support internal/external audits and respond to security questionnaires from partners and customers.
• Operationalize Policies, Standards, and Procedures
• Manage the rollout and adoption of security policies and standards.
• Ensure practical procedures and runbooks are documented, communicated, and followed.
• Identify gaps and propose pragmatic improvements to increase operational maturity.
• Lead Identity and Access Management (IAM) Operations
• Operationalize joiner/mover/leaver processes, RBAC, quarterly access reviews, and privileged access management.
• Coordinate MFA/SSO integrations with IT Operations and application owners.
• Continuously refine IAM processes to support secure, efficient access for clinicians and staff.
• Advance Data Protection
• Implement data classification and handling practices that protect PHI and sensitive information.
• Enforce encryption and key management standards across in-scope systems.
• Deploy and tune DLP baselines, working closely with business and technology stakeholders.
• Coordinate Security Operations and Incident Response
• Serve as the day-to-day liaison to MDR/MSSP partners for monitoring and incident response.
• Maintain and refine IR playbooks, escalation paths, and contact lists.
• Coordinate tabletop exercises and after-action reviews to strengthen readiness.
• Lead Vulnerability and Patch Management Cadence
• Own the vulnerability management rhythm—scanning, triage, prioritization, and reporting.
• Partner with Infrastructure and Application teams to drive timely remediation and track SLA adherence.
• Verify fixes and help teams understand the risk context behind remediation priorities.
• Support Third-Party Risk Management
• Partner with Compliance, Procurement, and Legal on vendor intake, tiering, and security due diligence.
• Help define security requirements for third-party relationships and track remediation follow-up.
• Ensure our partners’ security practices align with Revere Health’s expectations and obligations.
• Coordinate BC/DR Exercises
• Maintain the BC/DR test calendar and related playbooks for critical systems and processes.
• Coordinate exercises with system owners, capture evidence, and track follow-up actions.
• Contribute to the resilience of critical clinical and business services.
• Enable Secure Software Development Lifecycle (SSDLC)
• Introduce and track minimum security gates (e.g., SAST/DAST/dependency scanning).
• Partner with development and application leads on remediation SLAs and secure design practices.
• Help teams build security into solutions that support value-based care and organizational growth.
• Promote Security Awareness and Develop Talent
• Coordinate phishing simulations and role-based training in collaboration with Compliance and HR.
• Define and report KPIs/KRIs to leadership that show progress and highlight focus areas.
• Mentor and develop the IT Security Analyst and other team members, modeling curiosity, initiative, and professional growth.

IT Security Manager