Information Security Officer (ISO) (Remote)
About The Position
The Information Security Officer leads security operational governance for assigned accounts and products. The role drives security remediation and adherence to service-level agreements and objectives, supports compliant and reliable delivery of security tooling and business operations, and helps prevent contractual penalties associated with non-performance or non-compliance. It also manages relationships with Gainwell suppliers and clients, communicates security matters clearly, and creates and maintains account security plans. The officer manages security incidents from start to finish, audit preparation and remediation, security risks and exceptions, and the escalation and resolution of security issues. The role ensures teams understand and implement security fundamentals, policies, and regulatory and contractual standards, and coordinates security metrics and reporting in support of contractual commitments.
Requirements
- At least 10 years of experience in risk management, audit, security, or technical delivery.
- Bachelor's or master's degree in Computer Science, Computer Studies, Information Security, or an equivalent combination of education and experience.
- Experience with and understanding of security and auditing regulations.
- Experience with audit and compliance programs, including leading audits and remediation efforts.
- Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
- Excellent and effective communication skills.
- Ability to work effectively in diverse, multinational, and virtual environments.
- Self-motivated and tenacious.
- Sound judgment and integrity.
- Ability to influence delivery personnel in executing security and compliance requirements.
- Experience as a security consultant, architect, and/or engineer.
- Experience working with security management, including information governance and compliance.
- Deep understanding and working knowledge of information security industry best practices, with hands-on experience.
- Experience with security processes and standards, particularly NIST 800-53 and/or ISO 27001.
- Knowledge of security audit and accreditation processes.
- Ability to adapt to new security regimes.
- SIMM and SAM working compliance experience.
Responsibilities
- Lead security operational governance activities.
- Drive security remediation efforts and adherence to SLAs and SLOs.
- Support compliance-focused, security-driven operations.
- Ensure excellence in the delivery of security tooling and business operations, avoiding non-performance or non-compliance that could lead to contractual penalties.
- Manage relationships with Gainwell Technologies suppliers and the client.
- Present information in a way that builds confidence and provides clear Gainwell messaging.
- Create and maintain account security plans for selected accounts and products.
- Manage security incidents from start to finish.
- Manage audit preparation, facilitation, and remediation.
- Manage security risks and exceptions.
- Ensure knowledge and implementation of security fundamentals, policies, and regulatory and contractual standards.
- Escalate and resolve security issues.
- Coordinate delivery of security metrics and reporting in support of contractual commitments.
Benefits
- Flexible vacation policy.
- Educational assistance.
- Leadership and technical development academies.
- 401(k) employer match.
- Comprehensive health benefits.
- Opportunities to travel through work (0–10%).
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
