Information Security Officer – ISO

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Oversee security operational governance initiatives and spearhead security remediation activities while ensuring adherence to SLA/SLO standards.

• Guarantee excellence in the delivery of security tools and business operations, preventing non-performance or non-compliance that could result in contractual penalties.

• Cultivate and maintain relationships with suppliers from Gainwell Technologies and the client.

• Develop and uphold account security plans for designated accounts and products.

• Manage and track security incidents from inception to resolution.

• Oversee the preparation, facilitation, and remediation of audits.

• Handle security risks and exceptions effectively.

• Ensure the implementation of security fundamentals, policies, and standards, including adherence to regulatory and contractual obligations.

• Identify and resolve security issues promptly.

• Coordinate the delivery of security metrics and reporting to support contractual commitments.

⛳️ Requirements

• Minimum of 10 years’ experience in risk management, auditing, security, or technical delivery roles.

• Bachelor’s or master’s degree in Computer Science, Computer Studies, Information Security, or a relevant combination of education and experience.

• Familiarity with security and auditing regulations.

• Proven experience with audit and compliance programs, including leading audits and remediation efforts.

• Knowledge of HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP standards.

• Exceptional and effective communication skills.

• Ability to work efficiently in diverse, multinational, and virtual settings.

• Self-driven and persistent.

• Strong judgment and integrity.

• Capacity to influence delivery personnel in fulfilling security and compliance obligations.

• Background as a security consultant, architect, and/or engineer.

• Experience in security management, including information governance and compliance.

• In-depth knowledge and practical experience with industry best practices in information security.

• Familiarity with security processes and standards, particularly NIST 800-53 and/or ISO27001.

• Understanding of security audit and accreditation procedures.

• Ability to adapt to evolving security frameworks.

• Experience with SIMM and SAM working compliance.

• Must be capable of working remotely from the United States.

• Video cameras are required to be used during all interviews and the first week of orientation.

🏝️ Benefits

• Flexible work arrangements.

• Opportunities for learning and career advancement.

• Technical credentials and certification support.

• Generous and flexible vacation policy.

• Educational assistance programs.

• Comprehensive leadership and technical development academies.

• Opportunities for work-related travel (0-10%).

• 401(k) employer matching.

• Comprehensive health benefits package.