Information Security Officer; ISO

Position: Information Security Officer (ISO)
Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.

We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Summary As Information Security Leader (ISO), you will be accountable for all security-related compliance and delivery for the customers assigned. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The ISO works with the leadership team to identity issues, concerns, along with process improvement regarding information security.

Your role in our mission

Lead Security operational governance activities

Compliance and operational focused

Dedicated or Shared (Industry)
Multi-3rd party services and supplier management

Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance contractual penalties).Conduct, provide, and report on threat and vulnerability management that aligns to account service level agreements (SLAs)
Relationship management with Gainwell Technologies suppliers to clients.

Maintain an account system security plan for the selected account(s) and Products Manage and report security incidents

Ensure Audit preparation, facilitation and remediation

Manage Security Risk and Exception to standards management

Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
Escalate and resolve Security Incidents with the Security Incident Response team Coordinate delivery of Security Metrics and Reporting in support of contractual commitment

What we're looking forAt least 8 years’ experience working in a risk management, audit, security or technical delivery role Bachelor or master degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
Knowledge of the security and auditing regulations Exposure to audit and compliance programs

Excellent and effective communication skills Ability to work effectively in diverse, multi-national and virtual environments

Self-motivated and tenacious

Demonstrate sound judgment and integrity

Ability to influence Delivery personnel in the execution of security and compliance requirements

Preferred skills

Experience in IT outsourcing business or 8+ years in industry verticalCISSP certification, CISM/CISA or CRISC a plus

Experience with HIPAA, NIST/ARC-AMPE, and FedRAMP a plus California SIMM and SAM regulatory compliance (California specific roles)
Fluent in English What you should expect in this role Remote-based opportunity within the United States Opportunities to travel through your work (0-10%)Video cameras must be used during all interviews, as well as during the initial week of orientation

The deadline to submit applications for this posting is 10/30/2026

The pay range for this position is $90,900.00 - $ per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work ’ll have the opportunity to grow your career in a company that values work flexibility, learning, and…