Information Security Officer

Summary

Gainwell is the leading provider of technology solutions that are vital to the administration and operations of health and human services programs. Gainwell is a new company with over 50 years of proven experience, a reputation for service excellence and unparalleled industry expertise. Gainwell, with more than 10,000 employees, will support clients across 42 U.S. states and territories with offerings including Medicaid Management Information Systems (MMIS), fiscal agent services, program integrity, care management, immunization registry and eligibility services.

At Gainwell, it’s easy to see the positive impact of what we do. The passion you bring to your career ultimately benefits the lives improved by services we provide to our clients. We encourage you to challenge yourself, learn and grow in a company that thrives on innovation. We go beyond entering new arenas to shaping markets with transformational experiences that redefine our business. The difference is clear.

Your role in our mission

• Lead Security operational governance activities
• Drive security remediation efforts and SLA/SLO adherence
• Compliance, operationally focused and security driven
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
• Relationship management with Gainwell Technologies suppliers and the client.
• Presentation skills that invoke confidence and provide clear Gainwell messaging
• Create and maintain an account security plan for the selected account(s) and Products
• Manage and report security incidents from start to finish
• Manage audit preparation, facilitation and remediation
• Manage security risks and exceptions
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Escalate and resolve security issues
• Coordinate delivery of security metrics and reporting in support of contractual commitment

What we're looking for

• At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
• Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Experience with and understanding of the security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation efforts
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Ability to work effectively in diverse, multi-national and virtual environments
• Demonstrate sound judgment and integrity
• Ability to influence delivery personnel in the execution of security and compliance requirements
• Experience as a Security consultant, architect and/or engineer
• Experience in working with security management including information governance and compliance
• Deep understanding and working knowledge of information security industry best practices with hands on experience
• Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
• SIMM and SAM working compliance experience

What you should expect in this role

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation

The deadline to submit applications for this posting is November 30, 2026.