Information Security Officer; ISO

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.

We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

• Lead Security operational governance activities
• Drive security remediation efforts and SLA/SLO adherence
• Compliance, operationally focused and security driven
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
• Relationship management with Gainwell Technologies suppliers and the client.
• Presentation skills that invoke confidence and provide clear Gainwell messaging
• Create and maintain an account security plan for the selected account(s) and Products
• Manage and report security incidents from start to finish
• Manage audit preparation, facilitation and remediation
• Manage security risks and exceptions
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Escalate and resolve security issues
• Coordinate delivery of security metrics and reporting in support of contractual commitment

• At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
• Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Experience with and understanding of the security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation efforts
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Excellent and effective communication skills
• Ability to work effectively in diverse, multi-national and virtual environments
• Self-motivated and tenacious
• Demonstrate sound judgment and integrity
• Ability to influence delivery personnel in the execution of security and compliance requirements
• Experience as a Security consultant, architect and/or engineer
• Experience in working with security management including information governance and compliance
• Deep understanding and working knowledge of information security industry best practices with hands on experience
• Experience of security processes and standards, in particular NIST 800-53 and/or ISO
  27001
• Knowledge of security audit and accreditation processes
• Ability to adapt to new security regimes.
• SIMM and SAM working compliance experience

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation
• The deadline to submit applications for this posting is 9/30/2026

The pay range for this position is $ - $ per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work ’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance.

We also have a variety of leadership and technical development academies to help build your…