Security Compliance Officer

Gainwell Technologies LLC•Any city, OH

10d•$90,900 - $129,900•Remote

About The Position

The Security Compliance Officer serves as a subject matter expert on security procedures and audit compliance. The role responds to SOC 1, SOC 2, and NIST 800-53 external audits; supports threat and vulnerability management; and conducts regular identity access reviews. The officer ensures application security procedures meet business requirements and safeguards information from unauthorized use, disclosure, modification, damage, or loss. The role oversees access controls, secure destruction of highly sensitive confidential information, security administrators, and compliance with client and program security requirements. It coordinates corporate security programs to ensure adherence to client, government, and company policies and regulations. The position provides leadership and guidance to less experienced personnel, develops and delivers security education programs, and investigates or oversees investigations of losses and security violations. It recommends and implements corrective actions, prepares summaries for senior management, and researches technological advancements to continually improve security solutions and keep them aligned with industry and company standards. This is a remote-based opportunity within the United States, with 0–10% travel. Video cameras are required during interviews and the initial week of orientation.

Requirements

Bachelor's degree or equivalent combination of education and experience.
Experience in a HIPAA environment; Medicaid experience is preferred.
Experience working with corporate-level security systems and implementation procedures.
Experience working with corporate and government security regulations.
Experience working with company security software products.
Experience working with domain structures, user authentication, user profiles, and digital signatures.
Strong presentation and business solutions software skills.
Strong communication skills for interacting with team members, customers, management, and support personnel.
Strong analytical and problem-solving skills for designing, creating, and testing security systems.
Leadership skills to guide and mentor less experienced personnel.
Strong research skills.
Ability to work independently and as part of a team.
Ability to handle multiple tasks simultaneously and switch between tasks quickly.

Nice To Haves

Bachelor's degree in computer science, information technology, or a related field.
Experience in a Medicaid environment.

Responsibilities

Serve as a subject matter expert on security procedures and audit compliance.
Respond to SOC 1, SOC 2, and NIST 800-53 external audits.
Support threat and vulnerability management.
Conduct regular identity access reviews.
Ensure application security procedures meet business requirements and safeguard information against unauthorized use, disclosure, modification, damage, or loss.
Oversee implementation of access controls restricting systems, data, and programs to authorized and trained users.
Oversee destruction of highly sensitive confidential information in accordance with policies and procedures.
Develop and implement detailed security procedures.
Oversee the security administrator team to ensure compliance with client security procedures.
Ensure compliance with program security requirements, including personnel, physical, and administrative security systems and procedures.
Coordinate sensitive aspects of corporate security programs to ensure compliance with client, government, and company security policies and procedures.
Verify adherence to specific policies and ensure policy compliance with government regulations.
Provide leadership and work guidance to less experienced personnel.
Develop, coordinate, and conduct security education programs for appropriate personnel.
Investigate or oversee investigations of losses and security violations, recommend corrective actions, and implement approved actions as appropriate.
Provide summaries for senior management review.
Research technological advancements to continuously improve security solutions and align them with industry and company standards.