Information Security Officer

This is a fully remote position, open to applicants in California.

📋 Description

• Oversee security operational governance initiatives.

• Propel efforts for security remediation and ensure adherence to Service Level Agreements (SLA) and Service Level Objectives (SLO).

• Guarantee exceptional delivery in security tools and business processes.

• Cultivate and manage relationships with suppliers from Gainwell Technologies and clients.

• Develop and sustain an account security plan for designated accounts and products.

• Oversee and document security incidents from initiation to resolution.

• Handle audit preparation, facilitation, and remediation processes.

• Manage security risks and exceptions effectively.

• Ensure the application of security fundamentals, policies, and standards.

• Escalate and resolve security-related challenges.

• Coordinate the delivery of security metrics and reporting to support contractual obligations.

• Utilize presentation skills to convey clear messaging on behalf of Gainwell.

⛳️ Requirements

• Minimum of 10 years of experience in risk management, auditing, security, or technical delivery roles.

• Bachelor's or master's degree in Computer Science, Computer Studies, Information Security, or an equivalent combination of education and experience.

• Familiarity with security and auditing regulations.

• Experience in audit and compliance programs, including leading audits and remediation efforts.

• Knowledge of HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP standards.

• Ability to work efficiently in diverse, multinational, and virtual settings.

• Exhibit sound judgment and integrity.

• Capacity to influence delivery teams in fulfilling security and compliance requirements.

• Background as a Security consultant, architect, and/or engineer.

• Experience with security management, including information governance and compliance aspects.

• Comprehensive understanding and practical knowledge of information security best practices.

• Familiarity with security processes and standards, particularly NIST 800-53 and/or ISO27001.

• Experience in SIMM and SAM compliance.

• This is a remote position (US only).

🏝️ Benefits

• Flexible work arrangements.

• Opportunities for learning and career advancement.

• Access to technical credentials and certifications.

• Generous and flexible vacation policy.

• Educational assistance options.

• Leadership and technical development programs.

• Possibility to travel for work (0-10%).

• 401(k) employer matching.

• Comprehensive health benefits.