Information Security Officer

Gainwell Technologies; Missouri; Remote; USD 85,000 - 122,000; Full time

Job summary

Join a forward-thinking company as a Product Information Security Officer, where you will play a crucial role in ensuring the security of diverse healthcare products. This position offers the chance to collaborate with internal teams and external clients to optimize solutions while adhering to industry regulations. You will be responsible for managing security risks, facilitating product integrations, and enhancing compliance measures. With a focus on innovation and client support, this role promises exciting challenges and opportunities for professional growth. Enjoy a fully remote work environment with flexible travel options and a commitment to work-life balance.

Benefits

Flexible vacation policy

401(k) employer match

Comprehensive health benefits

Educational assistance

Qualifications

• 6+ years in risk management, audit, security, or technical delivery.
• Strong knowledge of security governance and compliance.

Responsibilities

• Facilitate integration of healthcare products into client systems.
• Educate stakeholders on safeguarding sensitive data.

Skills

Risk Management

Information Security

Compliance

Audit

Documentation

Education

Bachelor's degree in Computer Science

Master's degree in Information Security

Tools

NIST 800-53

ISO27001

MARS-E

Job description

Press Tab to Move to Skip to Content Link

Select how often (in days) to receive an alert:

Information Security Officer

Date: Mar 26, 2025

Location:

Any city, MO, US, 99999

Great companies need great teams to propel their operations. Join the group that solves business challenges and enhances the way we work and grow. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values your contributions and puts a premium on work flexibility, learning, and career development.

Summary

As a Product Information Security Officer (ISO), you will play a pivotal role in ensuring the seamless integration and effective utilization of Gainwell's diverse product portfolio. You will work closely with internal teams and external stakeholders to understand product functionalities, address concerns, and optimize solutions across various domains, including healthcare, data analysis, and client support services. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The ISO helps understand operational issues and plans next steps from an information security viewpoint.

This requires the ability to interact and influence at a managerial level within client organizations such as Information Governance and IT Security leads. You will demonstrate industry expertise and understanding of the security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework and additional NIST frameworks is what the ISO will be analyzing and enforcing, maintaining, and helping to assess on each designated account or health care product within Gainwell Technologies and its partners.

Your role in our mission

• Product Integration Management: Facilitate the integration of healthcare products and other Gainwell products into client systems. Coordinate with technical teams to ensure smooth deployment and compatibility of products within client environments.
• Data Security and Compliance: Educate stakeholders on the importance of safeguarding PHI/PII data embedded within Gainwell products. Implement and enforce security and compliance measures to mitigate risks associated with sensitive information.
• Client Support and Communication: Serve as a primary point of contact for clients regarding the security of the product functionalities, updates, and troubleshooting. Communicate effectively with internal teams to address client concerns and optimize product performance.
• Enhancement and Innovation: Collaborate with product development teams to identify opportunities for product enhancement and innovation based on client feedback and industry trends.
• Lead Security operational governance activities.
• Ensure delivery excellence in security tooling and business operations.
• Maintain an account security plan and other security related documentation for the selected account(s) and Products.
• Ensure Audit and penetration assessment preparation, facilitation, and remediation.
• Manage security risk and exceptions to security standards within the organization and third-party risk.
• Ensure knowledge sharing and implementation of security fundamentals, policies, and standards.
• Escalate and resolve Security Incidents with the Security Incident Response (SIR) team and Account Executives (AE).
• Manage and report security incidents.
• Coordinate delivery of Security Metrics and Reporting in support of contractual commitments.
• Documentation including writing policies, standards, procedures, process, and security plans.

What we're looking for

• At least 6 years’ experience working in a risk management, audit, security, or technical delivery role.
• Bachelor’s or Master’s degree in computer science, Computer Studies, Information Security (or equivalent combination of education and experience).
• Experience as a Security consultant, architect and/or engineer.
• Experience in working with security management including information governance and compliance.
• Good understanding of Information Security Assurance Practices and Risk Management, with hands-on experience.
• Experience with security processes and standards, in particular NIST 800-53, ISO27001, or MARS-E.
• Experience with security audit and accreditation processes.
• Ability to adapt to new security processes.
• Experience in writing documentation and presentations.

What you should expect in this role

• This role is 100% remote with the opportunity to travel through work up to 15% annually.
• Functionally reports to the Information Security Manager as part of the office of the Chief Information Security Officer (OCISO) to coordinate effort, solutions, and promote Security Practices.
• Works in conjunction with the Delivery Executive’s, Product Owners and Application Teams.
• Partners and collaborates with Information Security staff and partners to leverage existing solutions and promote common security standards.

The deadline to submit applications for this posting is April 18, 2025.

The pay range for this position is $85,000.00-$121,400.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You’ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is committed to a diverse, equitable, and inclusive workplace. We are proud to be an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We celebrate diversity and are dedicated to creating an inclusive environment for all employees.