Sr. Security Engineer

Description

WebMD is the most recognized and trusted brand of health information and the leading provider of health information services, serving consumers, physicians, healthcare professionals, employers and health plans through our public and private online portals and WebMD the Magazine. The WebMD Health Network includes WebMD, Medscape, MedicineNet, eMedicine, RxList, theheart.org and Medscape education. Our consumer portals and mobile health applications provide engaging, relevant and credible health and wellness information, personalized health assessment tools and access to online communities.
WebMD is an Equal Opportunity/Affirmative Action employer and does not discriminate on the basis of race, ancestry, color, religion, sex, gender, age, marital status, sexual orientation, gender identity, national origin, medical condition, disability, veterans status, or any other basis protected by law.

• Plans and leads policy and compliance development reviews; proposes security solutions and strategy changes
• Leads and conducts security audits & assessments, collaborates to develop mitigation plans and monitors remediation efforts
• Leads policy and compliance reviews and develops documentation updates
• Builds procedures to standardize processes and ensures continuous improvement
• Collaborates with product teams and developers to respond to security questionnaires as needed
• Identifies blind spots in our security posture and recommends security strategy and tools/solutions
• Works with legal, IT, product, and engineering teams to ensure alignment on security and compliance initiatives
• Manages planning and implementation of security compliance solutions with minimal input from leadership and staying within approved project scope, schedule and budget
• Promotes security awareness and best practices within the organization
• Prepares reports for management and regulatory bodies
• Exhibits strong business acumen, communications skills and customer-focused behaviors
• Contribute to creation of playbooks, standard operating procedures, and standard operating procedures