Information Security Officer (ISO)

Gainwell Furniture Co.; Grand Rapids (MI); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible vacation policy

401(k) employer match

Comprehensive health benefits

Educational assistance

Leadership and technical development"

Remote position (US only)

Job summary

Gainwell Furniture Co. is seeking a senior security governance professional to drive security governance, remediation, and advisory work across client accounts. You will lead security tooling delivery, manage incidents and audits, and coordinate cross-functional stakeholders to meet contractual commitments.

The role emphasizes governance, risk management, and advisory capabilities within a healthcare tech environment, with a remote US-only work option.

Qualifications

• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP requirements.
• Strong communication and advisory skills for cross-functional teams.
• Proven ability to lead audits and remediation programs.

Responsibilities

• Lead security governance and remediation efforts with SLA/SLO adherence.
• Oversee compliance-focused security operations and policy implementation.
• Ensure delivery excellence in security tooling and business operations to avoid penalties.
• Manage relationships with Gainwell suppliers and clients.
• Develop and maintain an account security plan for assigned accounts and products.
• Manage security incident lifecycle from detection through resolution.
• Lead audit preparedness, facilitation, and remediation efforts.
• Coordinate delivery of security metrics and reporting to support contractual commitments.

Skills

Risk management

Audit expertise

Security governance

Stakeholder communication

Cross-functional collaboration

Education

Bachelor's or Master's in CS/InfoSec

Job description

Overview

In this role, you drive security governance and remediation efforts to ensure compliant, high-quality security outcomes for client accounts. You'll lead security tooling delivery, manage incidents and audits, and coordinate cross-functional stakeholders to avoid penalties and protect sensitive information. You will build and maintain an account security plan and report on security metrics to meet contractual commitments. The role blends governance, risk management, and advisory work within a mission-driven healthcare tech environment.

Compensation / Benefits

• flexible vacation policy
• 401(k) employer match
• comprehensive health benefits
• educational assistance
• leadership and technical development academies
• remote position (US only)

Responsibilities

• Lead security operational governance activities and remediation efforts with SLA/SLO adherence
• Oversee compliance-focused security operations and policy implementation
• Ensure delivery excellence in security tooling and business operations to avoid non-performance or penalties
• Manage relationships with Gainwell suppliers and clients
• Develop and maintain an account security plan for assigned accounts and products
• Manage security incident lifecycle from detection through resolution
• Lead audit preparedness, facilitation, and remediation efforts
• Manage security risks and exceptions and escalated issues as needed
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Coordinate delivery of security metrics and reporting to support contractual commitments

Key requirements

• 10+ years in risk management, audit, security, or technical delivery roles
• Bachelor or Master's degree in Computer Science, Computer Studies, Information Security or equivalent
• Experience with security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Excellent and effective communication skills
• Ability to work effectively in diverse, multinational and virtual environments
• Self-motivated and tenacious; sound judgment and integrity
• Ability to influence delivery personnel in security and compliance execution
• Experience as a Security consultant, architect, or engineer; information governance and compliance
• Deep knowledge of information security best practices; hands-on experience
• Experience with security processes and standards, notably NIST 800-53 and/or ISO27001
• Knowledge of security audit and accreditation processes; ability to adapt to new security regimes
• SIMM and SAM working compliance experience

• strong communication
• adaptability to diverse environments
• collaboration and teamwork
• NIST 800-53
• ISO27001
• HIPAA