Technical Program Manager, Vulnerability Management

HealthEdge - Juneau, AK

Full-time - Mid Level

Remote - Juneau, AK

About the position

As the Technical Program Manager for Vulnerability Management at HealthEdge, you will oversee and coordinate the identification, assessment, and mitigation of security vulnerabilities across the company's infrastructure and applications. This role involves working closely with cross-functional operations and development teams to maintain a robust security posture against emerging threats, enhancing existing strategies, and ensuring compliance with industry standards.

Responsibilities

• Oversee and coordinate the identification, assessment, and mitigation of security vulnerabilities.
• Enhance existing strategy and processes for efficacy and efficiency across business units.
• Assist stakeholders with triage and remediation guidance for vulnerabilities.
• Validate and approve/reject false positives and assess ambiguity in vulnerability reports.
• Establish processes and guide the adoption of Vulnerability Management best practices.
• Leverage scanning, patching, risk management, and reporting tools to promote awareness.
• Identify opportunities for automation in vulnerability management processes.
• Provide regular updates on vulnerability management to executive leadership and stakeholders.
• Collaborate with internal departments and external vendors to align security efforts with business objectives.
• Develop key performance indicators (KPIs) and metrics to measure program effectiveness.
• Ensure compliance with healthcare industry standards and regulations, including HIPAA and HITRUST.
• Collaborate with legal, compliance, and audit teams to support security audits and assessments.

Requirements

• 4+ years of experience in program management.
• 3+ years of experience with infrastructure and application vulnerability management.
• Hands-on experience with application security scanning tools.
• Hands-on experience with infrastructure security scanning tools.
• Experience with workflow and ticketing platforms.
• Strong problem-solving skills and attention to detail.
• Excellent written and verbal communication skills, especially in conveying technical concepts to non-technical stakeholders.
• Ability to manage multiple tasks and priorities in a fast-paced environment.