Information Security Officer, ISO

Job Description: • Lead Security operational governance activities - Drive security remediation efforts and SLA/SLO adherence • Compliance, operationally focused and security driven • Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties). • Relationship management with Gainwell Technologies suppliers and the client. • Presentation skills that invoke confidence and provide clear Gainwell messaging • Create and maintain an account security plan for the selected account(s) and Products • Manage and report security incidents from start to finish • Manage audit preparation, facilitation and remediation • Manage security risks and exceptions • Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual) • Escalate and resolve security issues • Coordinate delivery of security metrics and reporting in support of contractual commitment Requirements: • At least 10 years’ experience working in a risk management, audit, security, or technical delivery role • Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience) • Experience with and understanding of the security and auditing regulations • Experience with audit and compliance programs, including leading audits and remediation efforts • Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP • Excellent and effective communication skills • Ability to work effectively in diverse, multi-national and virtual environments • Self-motivated and tenacious • Demonstrate sound judgment and integrity • Ability to influence delivery personnel in the execution of security and compliance requirements • Experience as a Security consultant, architect and/or engineer • Experience in working with security management including information governance and compliance • Deep understanding and working knowledge of information security industry best practices with hands on experience • Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001 • Knowledge of security audit and accreditation processes • Ability to adapt to new security regimes. • CALIFORNIA ONLY: SIMM and SAM working compliance experience Benefits: • generous, flexible vacation policy • educational assistance • comprehensive health benefits • 401(k) employer match • leadership and technical development academies