Information Security Officer (ISO) (Remote)
Gainwell Technologies is hiring a remote (US-only) Information Security Officer to lead security governance for healthcare accounts: driving remediation and SLA adherence, managing audits, incidents, risks, and compliance reporting against HIPAA, NIST, and FedRAMP requirements. Targets a senior security professional with 10+ years in risk, audit, or security roles.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 10+ years
- Category
- Security
- Posted
Skills
Must have
- At least 10 years' experience in a risk management, audit, security, or technical delivery role
- Bachelor or master's degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
- Experience with and understanding of security and auditing regulations
- Experience with audit and compliance programs, including leading audits and remediation efforts
- Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
- Excellent and effective communication skills
- Ability to work effectively in diverse, multi-national and virtual environments
- Self-motivated and tenacious
- Demonstrate sound judgment and integrity
- Ability to influence delivery personnel in the execution of security and compliance requirements
- Experience as a Security consultant, architect and/or engineer
- Experience in working with security management including information governance and compliance
- Deep understanding and working knowledge of information security industry best practices with hands-on experience
- Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
- Knowledge of security audit and accreditation processes
- Ability to adapt to new security regimes
- SIMM and SAM working compliance experience
Full description
Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.
Your role in our mission
- Lead Security operational governance activities
- Drive security remediation efforts and SLA/SLO adherence
- Compliance, operationally focused and security driven
- Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
- Relationship management with Gainwell Technologies suppliers and the client.
- Presentation skills that invoke confidence and provide clear Gainwell messaging
- Create and maintain an account security plan for the selected account(s) and Products
- Manage and report security incidents from start to finish
- Manage audit preparation, facilitation and remediation
- Manage security risks and exceptions
- Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
- Escalate and resolve security issues
- Coordinate delivery of security metrics and reporting in support of contractual commitment
What we're looking for
- At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
- Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
- Experience with and understanding of the security and auditing regulations
- Experience with audit and compliance programs, including leading audits and remediation efforts
- Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
- Excellent and effective communication skills
- Ability to work effectively in diverse, multi-national and virtual environments
- Self-motivated and tenacious
- Demonstrate sound judgment and integrity
- Ability to influence delivery personnel in the execution of security and compliance requirements
- Experience as a Security consultant, architect and/or engineer
- Experience in working with security management including information governance and compliance
- Deep understanding and working knowledge of information security industry best practices with hands on experience