Information Security Officer (ISO)

Responsibilities: Lead security operational governance activities and remediation efforts with SLA/SLO adherence Oversee compliance-focused security operations and policy implementation Ensure delivery excellence in security tooling and business operations to avoid non-performance or penalties Manage relationships with Gainwell suppliers and clients Develop and maintain an account security plan for assigned accounts and products Manage security incident lifecycle from detection through resolution Lead audit preparedness, facilitation, and remediation efforts Manage security risks and exceptions and escalated issues as needed Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual) Coordinate delivery of security metrics and reporting to support contractual commitments

Key requirements: 10+ years in risk management, audit, security, or technical delivery roles Bachelor or Master's degree in Computer Science, Computer Studies, Information Security or equivalent Experience with security and auditing regulations Experience with audit and compliance programs, including leading audits and remediation Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP Excellent and effective communication skills Ability to work effectively in diverse, multinational and virtual environments Self-motivated and tenacious; sound judgment and integrity Ability to influence delivery personnel in security and compliance execution Experience as a Security consultant, architect, or engineer; information governance and compliance Deep knowledge of information security best practices; hands-on experience Experience with security processes and standards, notably NIST 800-53 and/or ISO27001 Knowledge of security audit and accreditation processes; ability to adapt to new security regimes SIMM and SAM working compliance experience strong communication adaptability to diverse environments collaboration and teamwork NIST 800-53 ISO27001 HIPAA