Senior Information Security Officer (ISO)

Gainwell Technologies LLC

9d•Remote

About The Position

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities. Your role in our mission• Lead Security operational governance activities- Drive security remediation efforts and SLA/SLO adherence• Compliance, operationally focused and security driven• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).• Relationship management with Gainwell Technologies suppliers and the client.• Presentation skills that invoke confidence and provide clear Gainwell messaging• Create and maintain an account security plan for the selected account(s) and Products• Manage and report security incidents from start to finish• Manage audit preparation, facilitation and remediation• Manage security risks and exceptions• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)• Escalate and resolve security issues• Coordinate delivery of security metrics and reporting in support of contractual commitment

Requirements

At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
Experience with and understanding of the security and auditing regulations
Experience with audit and compliance programs, including leading audits and remediation efforts
Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
Excellent and effective communication skills
Ability to work effectively in diverse, multi-national and virtual environments
Self-motivated and tenacious
Demonstrate sound judgment and integrity
Ability to influence delivery personnel in the execution of security and compliance requirements
Experience as a Security consultant, architect and/or engineer
Experience in working with security management including information governance and compliance
Deep understanding and working knowledge of information security industry best practices with hands on experience
Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
Knowledge of security audit and accreditation processes
Ability to adapt to new security regimes.
CALIFORNIA ONLY: SIMM and SAM working compliance experience

Responsibilities

Lead Security operational governance activities
Drive security remediation efforts and SLA/SLO adherence
Compliance, operationally focused and security driven
Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
Relationship management with Gainwell Technologies suppliers and the client.
Presentation skills that invoke confidence and provide clear Gainwell messaging
Create and maintain an account security plan for the selected account(s) and Products
Manage and report security incidents from start to finish
Manage audit preparation, facilitation and remediation
Manage security risks and exceptions
Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
Escalate and resolve security issues
Coordinate delivery of security metrics and reporting in support of contractual commitment