Information Security Officer, ISO
Posted 2026-05-06
Remote, USA
Full-time
Immediate Start
- Job Description:
- Lead Security operational governance activities - Drive security remediation efforts and SLA/SLO adherence
- Compliance, operationally focused and security driven
- Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
- Relationship management with Gainwell Technologies suppliers and the client.
- Presentation skills that invoke confidence and provide clear Gainwell messaging
- Create and maintain an account security plan for the selected account(s) and Products
- Manage and report security incidents from start to finish
- Manage audit preparation, facilitation and remediation
- Manage security risks and exceptions
- Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
- Escalate and resolve security issues
- Coordinate delivery of security metrics and reporting in support of contractual commitment
- Requirements:
- At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
- Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
- Experience with and understanding of the security and auditing regulations
- Experience with audit and compliance programs, including leading audits and remediation efforts
- Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
- Excellent and effective communication skills
- Ability to work effectively in diverse, multi-national and virtual environments
- Self-motivated and tenacious
- Demonstrate sound judgment and integrity
- Ability to influence delivery personnel in the execution of security and compliance requirements
- Experience as a Security consultant, architect and/or engineer
- Experience in working with security management including information governance and compliance
- Deep understanding and working knowledge of information security industry best practices with hands on experience
- Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
- Knowledge of security audit and accreditation processes
- Ability to adapt to new security regimes.
- CALIFORNIA ONLY: SIMM and SAM working compliance experience
- Benefits:
- generous, flexible vacation policy
- educational assistance
- comprehensive health benefits
- 401(k) employer match
- leadership and technical development academies