Security Compliance Officer

Gainwell Technologies LLC•Any city, OH

10d•$90,900 - $129,900•Remote

About The Position

The Security Compliance Officer serves as a subject matter expert on security procedures and audit compliance at Gainwell. The role responds to SOC 1, SOC 2, and NIST 800-53 external audits, supports threat and vulnerability management, and conducts regular identity access reviews. It ensures application security procedures meet business requirements and protects information from unauthorized use, disclosure, modification, damage, or loss. The officer oversees access controls that limit systems, data, and program access to authorized and trained users, as well as the policy-compliant destruction of highly sensitive confidential information. The role develops and implements detailed security procedures and oversees security administrators to ensure compliance with client security procedures and program security requirements, including personnel, physical, and administrative safeguards. It coordinates corporate security programs to ensure compliance with client, government, and company policies and regulations. The position provides leadership and work guidance to less experienced personnel, develops and conducts security education programs, and investigates or oversees investigations of losses and security violations. It recommends corrective actions, implements approved actions as appropriate, and provides investigation summaries for senior management. The officer also researches technological advancements to continuously improve security solutions and keep them aligned with industry and company standards. This is a remote-based opportunity within the United States, with 0–10% travel. Video cameras are required during interviews and the initial week of orientation.

Requirements

Bachelor's degree or equivalent combination of education and experience.
Experience in a HIPAA environment; Medicaid experience preferred.
Experience working with corporate-level security systems and implementation procedures.
Experience working with corporate and government security regulations.
Experience working with company security software products.
Experience with domain structures, user authentication, user profiles, and digital signatures.
Strong presentation and business solutions software skills.
Strong communication skills for interacting with team members, customers, management, and support personnel.
Strong analytical and problem-solving skills for designing, creating, and testing security systems.
Leadership skills to guide and mentor less experienced personnel.
Strong research skills.
Ability to work independently and as part of a team.
Ability to handle multiple tasks simultaneously and switch between tasks quickly.

Nice To Haves

Bachelor's degree in computer science, information technology, or a related field.
Medicaid experience.

Responsibilities

Serve as a subject matter expert on security procedures and audit compliance.
Respond to SOC 1, SOC 2, and NIST 800-53 external audits.
Support threat and vulnerability management.
Conduct regular identity access reviews.
Ensure application security procedures meet business requirements and safeguard information against unauthorized use, disclosure, modification, damage, or loss.
Oversee implementation of access controls that restrict access to systems, data, and programs to authorized and trained users.
Oversee destruction of highly sensitive confidential information in accordance with policies and procedures.
Develop and implement detailed security procedures.
Oversee the security administrator team to ensure compliance with client security procedures and program security requirements.
Coordinate corporate security programs and verify compliance with client, government, and company security policies and applicable government regulations.
Provide leadership and work guidance to less experienced personnel.
Develop, coordinate, and conduct security education programs.
Investigate or oversee investigations of losses and security violations, recommend corrective actions, implement approved actions as appropriate, and provide summaries for senior management.
Research technological advancements to improve security solutions and align them with industry and company standards.