Apply on Employer Site

SWITS DIGITAL Private Limited · 21 hours ago

IT Security Lead

Boston, MA

Full-time

Hybrid

Senior Level

5+ years exp

SWITS DIGITAL Private Limited is seeking an IT Security Lead for a full-time, remote opportunity focusing on cybersecurity and data protection for a large-scale Public Health System Oracle Health EHR implementation. The role involves ensuring compliance with security standards and collaborating with various stakeholders to maintain secure operations across healthcare environments.

Information Technology & Services

Responsibilities

Lead hybrid cloud security architecture using Oracle Cloud Infrastructure (OCI) and state-managed data centers

Implement Zero Trust architecture, including MFA, RBAC, and least-privilege access

Align security controls with NIST 800-53, CIS benchmarks, and service agreements

Establish governance for change control, incident response, and disaster recovery (DR)

Act as primary liaison with Executive Steering Committee and state cybersecurity teams

Conduct enterprise risk assessments across technical, operational, and hosting domains

Maintain a risk register with mitigation strategies and governance controls

Lead vulnerability assessments, penetration testing, and firewall reviews

Ensure compliance with HIPAA, 42 CFR Part 2, FISMA, and applicable regulations

Oversee continuous monitoring, patching, and SOC coordination

Design and implement IAM across Oracle Health Millennium, RevElate, and integrated systems

Manage user provisioning, de-provisioning, and access audits

Validate SSO and MFA integrations with Oracle IAM and state identity providers

Define and validate SLAs, RTO/RPO, uptime, and incident response metrics

Coordinate DR testing with Oracle Health and state infrastructure teams

Develop and maintain failover, downtime, and recovery playbooks

Oversee secure data ingestion using Oracle Health Data Intelligence (HDI)

Validate HL7/FHIR interface security (encryption, authentication, audit logging)

Implement secure APIs and interoperability frameworks for state and federal systems

Provide 24/7 monitoring, quarterly health checks, and performance tuning

Lead modernization initiatives leveraging OCI security and automation services

Ensure alignment with ITIL service management and state governance practices

Qualification

IT security leadershipHIPAA complianceNIST 800-53Oracle Health EHRIdentity & Access ManagementVulnerability managementDisaster recovery planningOCI familiarityStakeholder managementDocumentation skillsCommunication skills