Advisor Information Security

Summary

As an Advisor Information Security at Gainwell, you can contribute your skills as we harness the power of technology to help our clients improve the health and well-being of the members they serve — a community’s most vulnerable. Connect your passion with purpose, teaming with people who thrive on finding innovative solutions to some of healthcare’s biggest challenges. Here are the details on this position. This role is strictly involved in the development of the product and does not involve access to Protected Health Information (PHI) & Personally Identifiable Information (PII) or any secured/confidential client data. The work is limited to application development and does not include handling or processing of sensitive health information.

Your role in our mission

Key responsibilities include:

•    Manage and support Identity and Access Management (IAM) processes, including user provisioning, de-provisioning, access reviews, and role management.
•    Design, implement, and maintain Microsoft Entra ID (Azure AD) solutions, including access governance and Access Packages.
•    Administer and support Privileged Access Management (PAM) solutions, with a strong focus on CyberArk.
•    Manage and support Saviynt IAM platform, including access requests, certifications, governance workflows, and reporting.
•    Work closely with application owners, business units, and IT teams to ensure appropriate access controls are implemented and maintained.
•    Support information security, compliance, and audit-related activities.
•    Utilize ServiceNow for incident, request, change, and access management processes.
•    Develop and maintain PowerShell automation scripts to improve operational efficiency and reduce manual tasks.
•    Conduct access reviews, segregation of duties (SoD) assessments, and compliance monitoring.
•    Collaborate with internal and external auditors to support audit and compliance requirements.
•    Communicate technical security concepts effectively to both technical and non-technical stakeholders.
•    Support security initiatives and contribute to continuous improvement of IAM and security processes.
•    Participate in security-related projects and business development activities as required.

What we're looking for

Required Qualifications:

•    Minimum 14-20 years of combined experience in Information Security, Identity and Access Management (IAM), Vulnerability Management, Compliance, Technology Audit, or a related field, preferably within healthcare environments.
•    Strong understanding of Microsoft Entra ID (Azure Active Directory), including:  Identity Governance, Access Reviews, Access Packages, Conditional Access and Role-Based Access Control (RBAC)
•    Hands-on experience with CyberArk PAM administration and privileged access governance.
•    Hands-on experience with Saviynt Identity Governance and Administration (IGA) platform.
•    Experience working with ServiceNow for ticketing, workflow management, and operational support.
•    Strong PowerShell scripting and automation experience.
•    Experience in information security governance, risk management, and compliance programs.
•    Knowledge of user lifecycle management, identity governance, and access certification processes.
•    Experience supporting audits, regulatory compliance, and security assessments.
•    Excellent analytical, troubleshooting, and problem-solving skills.
•    Strong organizational skills with the ability to manage multiple priorities in a fast-paced environment.
•    Excellent verbal and written communication skills.
•    Ability to work collaboratively with cross-functional teams and communicate effectively with leadership

What you should expect in this role

Work Environment : Remote

Shift Timings: 3PM-12AM