Information Security Officer, ISO

This is a fully remote position, open to applicants in Arizona.

📋 Description

• Oversee security operational governance activities.

• Propel security remediation initiatives and ensure adherence to SLA/SLO.

• Maintain compliance-focused, security-oriented operations.

• Guarantee excellence in the delivery of security tools and business operations, preventing non-performance or non-compliance that could result in contractual penalties.

• Foster relationships with Gainwell Technologies vendors and clients.

• Clearly present information and instill confidence in Gainwell communications.

• Develop and sustain account security plans for designated accounts and products.

• Manage and report on security incidents from inception to resolution.

• Oversee audit preparation, facilitation, and remediation processes.

• Manage security risks and exceptions effectively.

• Ensure the implementation of security fundamentals, policies, and standards, including regulatory and contractual obligations.

• Identify and resolve security issues promptly.

• Coordinate security metrics and reporting that support contractual obligations.

⛳️ Requirements

• Minimum of 10 years’ experience in risk management, auditing, security, or a technical delivery role.

• Bachelor’s or master’s degree in Computer Science, Computer Studies, Information Security, or a relevant combination of education and experience.

• Familiarity with security and auditing regulations.

• Background in audit and compliance programs, including leading audits and remediation activities.

• Knowledge of HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP standards.

• Exceptional and effective communication abilities.

• Capability to work effectively in diverse, multinational, and virtual environments.

• Self-driven and persistent.

• Display sound judgment and integrity.

• Ability to influence delivery teams in fulfilling security and compliance requirements.

• Experience as a Security consultant, architect, and/or engineer.

• Experience with security management, including information governance and compliance.

• Profound understanding and practical knowledge of information security industry best practices.

• Familiarity with security processes and standards, specifically NIST 800-53 and/or ISO27001.

• Knowledge of security audit and accreditation procedures.

• Adaptability to new security frameworks.

• Experience with SIMM and SAM working compliance.

• Must be eligible to work in the US.

🏝️ Benefits

• Flexible working arrangements.

• Opportunities for learning and career advancement.

• Support for technical credentials and certifications.

• Generous and flexible vacation policy.

• Educational assistance available.

• Leadership and technical development programs.

• 401(k) employer matching.

• Comprehensive health benefits.

• Opportunities for travel through work (0-10%).