[Hiring] Information Security Officer @Gainwell Technologies LLC

Role Description

As Information Security Leader (ISO), you will be accountable for all security-related compliance and delivery for the customers assigned. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The ISO works with the leadership team to identify issues, concerns, along with process improvement regarding information security.

• Lead Security operational governance activities
• Compliance and operational focused
• Dedicated or Shared (Industry)
• Multi-3rd party services and supplier management
• Ensuring delivery excellence in security tooling and business operations
• Conduct, provide, and report on threat and vulnerability management that aligns to account service level agreements (SLAs)
• Relationship management with Gainwell Technologies suppliers to clients
• Maintain an account system security plan for the selected account(s) and Products
• Manage and report security incidents
• Ensure Audit preparation, facilitation and remediation
• Manage Security Risk and Exception to standards management
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
• Escalate and resolve Security Incidents with the Security Incident Response team
• Coordinate delivery of Security Metrics and Reporting in support of contractual commitment

Qualifications

• At least 8 years’ experience working in a risk management, audit, security or technical delivery role
• Bachelor or master degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Knowledge of the security and auditing regulations
• Exposure to audit and compliance programs
• Excellent and effective communication skills
• Ability to work effectively in diverse, multi-national and virtual environments
• Self-motivated and tenacious
• Demonstrate sound judgment and integrity
• Ability to influence Delivery personnel in the execution of security and compliance requirements

Requirements

• Experience in IT outsourcing business or 8+ years in industry vertical
• CISSP certification, CISM/CISA or CRISC a plus
• Experience with HIPAA, NIST/ARC-AMPE, and FedRAMP a plus
• California SIMM and SAM regulatory compliance (California specific roles)
• Fluent in English

Benefits

• Generous, flexible vacation policy
• 401(k) employer match
• Comprehensive health benefits
• Educational assistance
• Leadership and technical development academies to help build your skills and capabilities