Information Security Officer (ISO) (Remote)

Gainwell Technologies LLC; Oregon; Hybrid; USD 91,000 - 130,000; Full time

Benefits offered by this job

Flexible vacation policy

Educational assistance

401(k) employer match

Health benefits

Leadership academies

Job summary

Gainwell Technologies LLC is seeking a senior security leader to drive governance, risk, and compliance across our accounts. You will oversee remediation programs, ensure regulatory adherence, and coordinate security reporting to meet contractual commitments.

The role requires extensive experience in risk management, audits, and security operations, with strong communication and the ability to work in diverse, virtual environments. Remote US-based position with travel as needed.

Qualifications

• Minimum 10 years in risk, audit, security, or delivery roles.
• Degree in CS/Info Security or equivalent.
• Experience with HIPAA, NIST, FedRAMP and related regulations.
• Proven track record leading audits and remediation programs.
• Strong communication and ability to work across diverse teams.

Responsibilities

• Lead security governance activities and remediation efforts.
• Ensure SLA/SLO adherence and delivery excellence in security tooling.
• Manage audits, reporting, and remediation for assigned accounts.
• Coordinate security metrics and reporting to meet contractual commitments.
• Escalate and resolve security issues and risks as needed.
• Build and maintain an account security plan for products and services.

Skills

Risk management

Security governance

Audit & compliance

Regulatory knowledge

NIST/ISO knowledge

Security consulting

SIMM/SAM compliance

Education

Bachelor's/Master's in CS or Info Security

Tools

Audit tooling

Security tooling

Job description

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You'll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You'll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Your role in our mission

• Lead Security operational governance activities
• Drive security remediation efforts and SLA/SLO adherence
• Compliance, operationally focused and security driven
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
• Relationship management with Gainwell Technologies suppliers and the client.
• Presentation skills that invoke confidence and provide clear Gainwell messaging
• Create and maintain an account security plan for the selected account(s) and Products
• Manage and report security incidents from start to finish
• Manage audit preparation, facilitation and remediation
• Manage security risks and exceptions
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Escalate and resolve security issues
• Coordinate delivery of security metrics and reporting in support of contractual commitment

What we're looking for

• At least 10 years' experience working in a risk management, audit, security, or technical delivery role
• Bachelor or master's degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Experience with and understanding of the security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation efforts
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Excellent and effective communication skills
• Ability to work effectively in diverse, multi-national and virtual environments
• Self-motivated and tenacious
• Demonstrate sound judgment and integrity
• Ability to influence delivery personnel in the execution of security and compliance requirements
• Experience as a Security consultant, architect and/or engineer
• Experience in working with security management including information governance and compliance
• Deep understanding and working knowledge of information security industry best practices with hands on experience
• Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
• Knowledge of security audit and accreditation processes
• Ability to adapt to new security regimes.
• SIMM and SAM working compliance experience

What you should expect in this role

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation
• The deadline to submit applications for this posting is 11/30/2026

The pay range for this position is $90,900.00 - $129,900.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors.

Put your passion to work at Gainwell. You'll have the opportunity to grow your career in a company that values work flexibility, learning, and career development.

All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits , and educational assistance.

We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You'll be joining a company where collaboration, innovation, and inclusion fuel our growth.

Gainwell Technologies is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

Gainwell Technologies defines "wages" and "wage rates" to include "all forms of pay, including, but not limited to, salary, overtime pay, bonuses, stock, stock options, profit sharing and bonus plans, life insurance, vacation and holiday pay, cleaning or gasoline allowances, hotel accommodations, reimbursement for travel expenses, and benefits."