Senior Project Manager – Vulnerability Remediation (Healthcare Domain) - R01557968

About Brillio: Brillio is one of the fastest growing digital technology service providers and a partner of choice for many Fortune 1000 companies seeking to turn disruption into a competitive advantage through innovative digital adoption. Brillio, renowned for its world-class professionals, referred to as "Brillians", distinguishes itself through their capacity to seamlessly integrate cutting-edge digital and design thinking skills with an unwavering dedication to client satisfaction. Brillio takes pride in its status as an employer of choice, consistently attracting the most exceptional and talented individuals due to its unwavering emphasis on contemporary, groundbreaking technologies, and exclusive digital projects. Brillio's relentless commitment to providing an exceptional experience to its Brillians and nurturing their full potential consistently garners them the Great Place to Work® certification year after year. Senior Project Manager – Vulnerability Remediation (Healthcare Domain) Primary Skills

Senior Project Manager – Vulnerability Remediation (Healthcare Domain)

Job requirements

 

As a consultant within the HLS team, you will work with our clients to define their digital strategy and execution roadmap, and design and implement differentiated digital solutions to help deliver measurable value.

 

Job Description:

The Senior Project Manager will lead and manage large-scale vulnerability remediation programs across healthcare application portfolios and infrastructure systems. This role will ensure timely identification, prioritization, and remediation of Critical and High vulnerabilities aligned to regulatory and compliance requirements (HIPAA, HITECH, CMS, HITRUST). The candidate must have hands-on experience driving remediation activities for both application development (code, libraries, APIs, and platform vulnerabilities) and infrastructure (patching, server configuration, network, and cloud security issues).

Key Responsibilities

Lead end-to-end program execution for vulnerability remediation related to applications, databases, servers, cloud environments, and legacy healthcare platforms.

Prioritize and track remediation of CVITs, VITs, vulnerabilities in code, patch deployments, and configuration fixes across technical teams.

Work with security, DevOps, application development, enterprise architecture, and infrastructure teams to systematically remediate scan findings.

Conduct backlog grooming, sprint planning, release coordination, and delivery tracking for remediation activities.

Analyze vulnerability scan reports and dashboards from tools such as Qualys, Tenable, Rapid7, CrowdStrike, Microsoft Defender, etc.

Develop remediation plans aligned to exposure of PHI/PII, severity, exploitability, and system criticality.

Prepare and present weekly status decks, risk registers, and executive scorecards for senior leadership and audit teams.

Oversee SOW deliverables, team onboarding, cross-shore coordination, and stakeholder alignment.

Ensure remediation governance, compliance documentation, and closure of cyber audit findings.

Develop and refine remediation SLAs, prioritization models, RAID logs, and approval workflows involving business, security, and IT stakeholders.

Required Skills & Qualifications

10+ years of IT project or program management experience, including 5+ years dedicated to security or vulnerability remediation.

Must have experience managing both application development and infrastructure-related vulnerabilities, including:

Code vulnerabilities (OWASP, dependency issues, API weaknesses, encryption gaps)

Infrastructure vulnerabilities (OS patching, server hardening, cloud misconfigurations, IAM issues)

Deep understanding of healthcare systems and PHI security risks.

Strong knowledge of healthcare compliance frameworks such as HIPAA, HITECH, HITRUST, NIST CSF, CMS.

Experience working in distributed delivery models with offshore/onshore teams.

Proficient in Agile, Scrum, and hybrid methodologies.

Excellent communication, stakeholder influencing, and senior leadership reporting capabilities.

Familiarity with SQL, cloud platforms (Azure/AWS), CI/CD pipelines, and DevSecOps practices.

Preferred Certifications

PMP, CSM, SAFe

CompTIA Security+, CISSP, CISM

HITRUST or healthcare security certifications (preferred)

Healthcare Domain Experience (Preferred)

Payer systems (Medicaid, Medicare, Marketplace, Commercial)

Claims processing, provider data, enrollment, pharmacy, member access systems

Legacy remediation involving .NET, Java, SAP, Oracle, Salesforce Health Cloud, and Data Hub environments

Key Success Metrics

Reduction in Critical/High vulnerability backlog

SLA compliance for remediation (30/60/90-day closure)

Audit remediation closure rate

Legacy backlog risk reduction

Operational readiness and stability for healthcare systems

 

Why should you apply for this role?

As Brillio continues to gain momentum as a trusted partner for our clients in their digital transformation journey, we strive to set new benchmarks for speed and value creation. The DI team at Brillio is at the forefront of leading this charge by reimagining and executing how we structure, sell and deliver our services to better serve our clients.

 

Know more about <add practice specific page link from Brillio website>

PPE: https://www.brillio.com/platform-and-product-engineering/

DAE: https://www.brillio.com/services-data-analytics/

CES: https://www.brillio.com/services-customer-experience-services/

DI: https://www.brillio.com/services-digital-infrastructure/

 

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

 

 

Know what it’s like to work and grow at Brillio: https://www.brillio.com/join-us/

 

Equal Employment Opportunity Declaration

Brillio is an equal opportunity employer to all, regardless of age, ancestry, colour, disability (mental and physical), exercising the right to family care and medical leave, gender, gender expression, gender identity, genetic information, marital status, medical condition, military or veteran status, national origin, political affiliation, race, religious creed, sex (includes pregnancy, childbirth, breastfeeding, and related medical conditions), and sexual orientation.

 

#LI-RJ1