Information Security Officer – ISO

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Oversee security operational governance initiatives

• Propel security remediation actions and ensure adherence to SLA/SLO

• Guarantee excellence in the delivery of security tools and business operations

• Cultivate relationships with Gainwell Technologies suppliers and clients

• Develop and uphold account security strategies for designated accounts and products

• Oversee and report security incidents from inception to resolution

• Manage audit preparations, facilitation, and corrective actions

• Handle security risks and exceptions

• Ensure the application of security fundamentals, policies, and compliance with regulatory and contractual standards

• Escalate and resolve security challenges

• Coordinate security metrics and reporting to support contractual obligations

• Deliver presentations and effectively communicate Gainwell's messaging

⛳️ Requirements

• Minimum of 10 years of experience in risk management, audit, security, or technical delivery roles

• Bachelor’s or Master’s degree in Computer Science, Computer Studies, Information Security, or an equivalent combination of education and experience

• Familiarity with security and auditing regulations

• Experience in audit and compliance programs, including leading audits and remediation initiatives

• Knowledge of HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP

• Exceptional and effective communication skills

• Ability to function effectively in diverse, multinational, and virtual environments

• Self-driven and persistent

• Exhibit sound judgment and integrity

• Capacity to influence delivery personnel in meeting security and compliance mandates

• Background as a Security consultant, architect, and/or engineer

• Experience with security management, including information governance and compliance

• Profound understanding and practical knowledge of information security industry best practices with hands-on experience

• Familiarity with security processes and standards, especially NIST 800-53 and/or ISO27001

• Knowledge of security audit and accreditation procedures

• Ability to adapt to new security frameworks

• Experience with SIMM and SAM working compliance

🏝️ Benefits

• Flexible work arrangements

• Opportunities for learning and career advancement

• Support for technical credentials and certifications

• Generous and flexible vacation policy

• Educational assistance programs

• Leadership and technical development academies

• Opportunities for travel through work (0-10%)

• 401(k) employer matching

• Comprehensive health benefits