Information Security Officer

Gainwell Technologies LLC•Any city, OH

10d•$101,300 - $144,700•Remote

About The Position

The Information Security Officer leads security operational governance, remediation, compliance, and delivery activities for selected accounts and products. The role works with Gainwell Technologies suppliers, clients, and delivery personnel to support security requirements, contractual commitments, and delivery excellence, while preventing non-performance or non-compliance that could lead to contractual penalties. It is a remote position for candidates in the United States, with 0–10% travel. Video cameras are required during interviews and the initial week of orientation.

Requirements

At least 10 years of experience in risk management, audit, security, or technical delivery.
A bachelor's or master's degree in Computer Science, Computer Studies, or Information Security, or an equivalent combination of education and experience.
Experience with and understanding of security and auditing regulations.
Experience with audit and compliance programs, including leading audits and remediation efforts.
Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
Ability to work effectively in diverse, multinational, and virtual environments.
Sound judgment and integrity.
Ability to influence delivery personnel in executing security and compliance requirements.
Experience as a security consultant, architect, and/or engineer.
Experience working with security management, including information governance and compliance.
Deep understanding and working knowledge of information security best practices, with hands-on experience.
Experience with security processes and standards, particularly NIST 800-53 and/or ISO 27001.
SIMM and SAM working compliance experience.

Responsibilities

Lead security operational governance activities.
Drive security remediation efforts and adherence to SLA/SLO commitments.
Ensure delivery excellence in security tooling and business operations, avoiding non-performance or non-compliance that could lead to contractual penalties.
Manage relationships with Gainwell Technologies suppliers and the client.
Present clear Gainwell messaging in a way that invokes confidence.
Create and maintain account security plans for selected accounts and products.
Manage security incidents from start to finish and report on them.
Manage audit preparation, facilitation, and remediation.
Manage security risks and exceptions.
Ensure knowledge and implementation of security fundamentals, policies, and standards, including regulatory and contractual requirements.
Escalate and resolve security issues.
Coordinate security metrics and reporting in support of contractual commitments.