Information Security Officer (ISO) (Remote)

Gainwell Technologies LLC; Ohio; Remote; USD 90,000 - 129,000; Full time

Job summary

Gainwell Technologies seeks a senior security program lead to drive governance, remediation, and compliance across risk, audit, and technical delivery teams. You will manage audits, HIPAA/NIST standards, and security incident response in a remote, US-only role with some travel.

The position emphasizes contract adherence, data protection, and cross-functional collaboration. You will leverage deep knowledge of security frameworks, regulatory requirements, and industry best practices to influence

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience).
• Experience with security and auditing regulations and compliance programs, including leading audits and remediation efforts.
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
• Excellent communication skills and ability to work in diverse, virtual environments.

Responsibilities

• Lead Security operational governance activities.
• Drive security remediation efforts and SLA/SLO adherence.
• Ensure compliance, operational focus and security-driven delivery.
• Manage security incidents from start to finish and report outcomes.
• Coordinate security metrics and reporting to meet contractual commitments.
• Manage audit preparation, facilitation and remediation.
• Oversee security risks and exceptions with recommended mitigations.
• Maintain knowledge of security fundamentals, policies, and standards (regulatory and contractual).
• Escalate and resolve security issues and influence delivery teams.

Skills

Risk management

Audit & compliance

Security expertise

HIPAA familiarity

NIST familiarity

Communication skills

Global collaboration

Judgment & integrity

Influence delivery

Security consulting

Education

Bachelor’s/Master’s in CS or InfoSec

Tools

NIST 800-53

ISO27001

Job description

Your role in our mission

• Lead Security operational governance activities
• Drive security remediation efforts and SLA/SLO adherence
• Compliance, operationally focused and security driven
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
• Relationship management with Gainwell Technologies suppliers and the client.
• Presentation skills that invoke confidence and provide clear Gainwell messaging
• Create and maintain an account security plan for the selected account(s) and Products
• Manage and report security incidents from start to finish
• Manage audit preparation, facilitation and remediation
• Manage security risks and exceptions
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Escalate and resolve security issues
• Coordinate delivery of security metrics and reporting in support of contractual commitment

What we're looking for

• At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
• Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Experience with and understanding of the security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation efforts
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Excellent and effective communication skills
• Ability to work effectively in diverse, multi-national and virtual environments
• Self-motivated and tenacious
• Demonstrate sound judgment and integrity
• Ability to influence delivery personnel in the execution of security and compliance requirements
• Experience as a Security consultant, architect and/or engineer
• Experience in working with security management including information governance and compliance
• Deep understanding and working knowledge of information security industry best practices with hands on experience
• Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
• Knowledge of security audit and accreditation processes
• Ability to adapt to new security regimes.
• SIMM and SAM working compliance experience

What you should expect in this role

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation
• The deadline to submit applications for this posting is 10/30/2026

The pay range for this position is $90,000 - $129,000 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits , and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You’ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Gainwell Technologies defines “wages” and “wage rates” to include “all forms of pay, including, but not limited to, salary, overtime pay, bonuses, stock, stock options, profit sharing and bonus plans, life insurance, vacation and holiday pay, cleaning or gasoline allowances, hotel accommodations, reimbursement for travel expenses, and benefits.