Information Security Officer (ISO)

Gainwell Technologies LLC•Any city, OH

7d•$126,600 - $180,800•Remote

About The Position

Gainwell Technologies is seeking an Information Security Officer to lead security governance and operational activities for assigned accounts and products. The role focuses on security remediation, compliance, delivery excellence, and adherence to service-level commitments, while maintaining relationships with suppliers and clients. The officer will develop and maintain account security plans, manage security incidents and risks, coordinate audits and remediation, and report security metrics. This is a remote position open to candidates in the United States, with 0–10% travel.

Requirements

At least 10 years of experience in risk management, audit, security, or technical delivery.
Bachelor's or master's degree in Computer Science, Computer Studies, or Information Security, or an equivalent combination of education and experience.
Experience with and understanding of security and auditing regulations.
Experience with audit and compliance programs, including leading audits and remediation efforts.
Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
Excellent and effective communication skills.
Ability to work effectively in diverse, multinational, and virtual environments.
Self-motivated and tenacious, with sound judgment and integrity.
Ability to influence delivery personnel in executing security and compliance requirements.
Experience as a security consultant, architect, and/or engineer.
Experience working with security management, including information governance and compliance.
Deep understanding and working knowledge of information security best practices, with hands-on experience.
Experience with security processes and standards, particularly NIST 800-53 and/or ISO 27001.
Knowledge of security audit and accreditation processes.
Ability to adapt to new security regimes.
SIMM and SAM working compliance experience.

Responsibilities

Lead security operational governance activities.
Drive security remediation efforts and adherence to SLAs and SLOs.
Ensure security tooling and business operations are delivered excellently and avoid non-performance or non-compliance that could result in contractual penalties.
Manage relationships with Gainwell Technologies suppliers and the client.
Present clear Gainwell messaging and build confidence through presentations.
Create and maintain account security plans for selected accounts and products.
Manage and report security incidents from start to finish.
Manage audit preparation, facilitation, and remediation.
Manage security risks and exceptions.
Ensure knowledge and implementation of security fundamentals, policies, and regulatory and contractual standards.
Escalate and resolve security issues.
Coordinate security metrics and reporting in support of contractual commitments.