Apply on Employer Site

Divurgent · 19 hours ago

Oracle Health/Cerner IT Security Project Manager (Contract to Hire)

Boston, MA

Contract

Hybrid

Senior Level

5+ years exp

Divurgent is a solutions provider focused on healthcare consulting, and they are seeking an Oracle Health/Cerner IT Security Project Manager. This role will oversee cybersecurity and data protection strategies for Oracle Health EHR implementations, ensuring compliance with security standards and effective risk management.

ConsultingHealth CareInformation TechnologyLegal

No H1B

Hiring Manager

Pat Munday

Responsibilities

Lead the development of a hybrid cloud security architecture leveraging Oracle Cloud Infrastructure (OCI) and State-managed data centers

Implement zero-trust architecture with least-privilege access, multi-factor authentication (MFA), and role-based access controls (RBAC)

Align all security controls with service agreements, NIST 800-53, and CIS benchmarks

Establish governance models for change control, incident response, and disaster recovery (DR) planning

Serve as the primary liaison to the Executive Steering Committee and state cybersecurity teams

Conduct structured risk assessments across technical, contractual, staffing, and hosting domains

Develop and maintain a risk register with mitigation strategies anchored in governance, monitoring, and contract safeguards

Lead vulnerability scanning, penetration testing, and firewall reviews across all environments

Ensure compliance with HIPAA, 42 CFR Part 2, FISMA, and other applicable regulations

Oversee the implementation of continuous monitoring, patching, and SOC (Security Operations Center) coordination

Design and implement IAM protocols across Oracle Health Millennium, RevElate, and integrated systems

Manage user provisioning, de-provisioning, and access audits across all care settings

Validate integration with Oracle IAM and identity providers for seamless SSO and MFA

Define and validate SLAs for uptime, performance, RTO/RPO, and incident response

Coordinate DR testing with Oracle Health and infrastructure teams

Develop and maintain playbooks for failover, downtime procedures, and recovery operations

Ensure that DR protocols are embedded in training and operational handoffs

Oversee secure ingestion and normalization of multi-source data (clinical, claims, operational) using Oracle Health Data Intelligence (HDI)

Validate HL7/FHIR interface security, including encryption, authentication, and audit logging

Implement secure APIs and data exchange frameworks for interoperability with federal and state systems

Provide 24/7 monitoring, quarterly health checks, and proactive performance tuning

Lead continuous modernization efforts leveraging OCI’s roadmap (AI, automation, new security services)

Ensure alignment with ITIL service management practices and state governance

Qualification

Oracle Health ImplementationCybersecurity StrategiesHIPAA ComplianceNIST 800-53IdentityAccess ManagementVulnerability ManagementDisaster Recovery PlanningOracle Cloud InfrastructureStakeholder EngagementCommunicationDocumentation SkillsTeam Collaboration