Information Security Officer

Summary

Gainwell Technologies is a leading health care technology services provider delivering business solutions to health care clients across the United States. The Information Security Officer (ISO) plays a key role in supporting secure, compliant delivery for assigned customers by aligning information security practices with client objectives, regulatory requirements, and operational standards.

Your role in our mission

As an ISO, you will serve as a trusted security advisor for assigned accounts, working closely with internal leaders, delivery teams, clients, and suppliers to support compliance, manage risk, and strengthen security operations. You will help ensure customer environments meet contractual, regulatory, and industry security requirements, including HIPAA, NIST 800-53, ARC-AMPE, and related frameworks.

• Lead security governance activities and support delivery excellence across assigned accounts and products.
• Maintain account system security plans and coordinate security metrics, reporting, audit preparation, and remediation efforts.
• Manage and report security incidents, risks, exceptions, threats, and vulnerabilities in alignment with service level agreements.
• Partner with Gainwell teams, suppliers, and client stakeholders to promote consistent security standards and resolve compliance concerns.

What we're looking for

We are looking for a security professional with strong risk management, audit, compliance, and client-facing experience who can influence across teams and translate security requirements into practical deliverables.

• At least 8 years of experience in risk management, audit, security, technical delivery, or a related field.
• Bachelor’s or master’s degree in Computer Science, Computer Studies, Information Security, or an equivalent combination of education and experience.
• Knowledge of security governance, audit processes, compliance programs, and regulated health care environments.
• Experience with NIST 800-53, ARC-AMPE, HIPAA, FedRAMP, or similar security frameworks is preferred.
• CISSP, CISM, CISA, or CRISC certification is a plus.
• Strong communication, judgment, integrity, and the ability to influence delivery teams and client stakeholders.

What you should expect in this role

In this role, you can expect to work in a fast-paced, collaborative environment with diverse, virtual, and cross-functional teams. You will functionally report to the Information Security Leader as part of the Office of the Chief Business Information Security Officer and work closely with Account Delivery Executives, IT Delivery Leadership, Information Security teams, partners, and suppliers.

• You will support multiple accounts, products, or suppliers while balancing operational delivery and compliance expectations.
• You will collaborate with client and internal leadership, including information governance and IT security stakeholders.
• You will need to be self-motivated, adaptable, and comfortable resolving issues in complex security and compliance environments.

The deadline to submit applications is Novemeber 2, 2026.

#LI-LM1

#LI-REMOTE