Information Security Officer (ISO) (Remote)

Gainwell Technologies LLC; Tennessee; Remote; USD 90,000 - 129,000; Full time

Benefits offered by this job

Generous vacation policy

401(k) employer match

Comprehensive health benefits

Educational assistance

Leadership academies

Job summary

Gainwell Technologies is seeking a Senior Security Governance Lead to drive operational governance, remediation, and compliance across security tooling and business operations for a selected account. You will manage security incidents, audits, risk reporting, and ensure alignment with contractual penalties.

The role demands experience in risk management, audits, HIPAA, NIST, FedRAMP, and ISO27001, with the ability to influence delivery teams in a multinational, virtual environment.

Qualifications

• 10+ years in risk, audit, security or delivery roles.
• Degree in CS, Information Security or equivalent mix.
• Experience with security regulations and audits.
• Familiar with HIPAA, NIST, FedRAMP and ISO27001.
• Strong communication and cross-functional influence.

Responsibilities

• Lead security governance and operational oversight.
• Drive remediation efforts and SLA/SLO adherence.
• Ensure compliance and manage security incidents end-to-end.
• Prepare for audits and coordinate remediation actions.
• Report security metrics to meet contractual commitments.
• Manage relationships with suppliers and clients.
• Create and maintain an account security plan.
• Escalate and resolve security issues.
• Promote security policies across the org.

Skills

Risk management

Audit & compliance

Security governance

Regulatory understanding

HIPAA knowledge

NIST/FedRAMP knowledge

ISO27001 familiarity

Communication skills

Stakeholder influence

Security incident management

Education

Bachelor's or Master's in CS/Info Security

Tools

SIMM

SAM

Job description

Your role in our mission

• Lead Security operational governance activities
• Drive security remediation efforts and SLA/SLO adherence
• Compliance, operationally focused and security driven
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
• Relationship management with Gainwell Technologies suppliers and the client.
• Presentation skills that invoke confidence and provide clear Gainwell messaging
• Create and maintain an account security plan for the selected account(s) and Products
• Manage and report security incidents from start to finish
• Manage audit preparation, facilitation and remediation
• Manage security risks and exceptions
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
• Escalate and resolve security issues
• Coordinate delivery of security metrics and reporting in support of contractual commitment

What we're looking for

• At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
• Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
• Experience with and understanding of the security and auditing regulations
• Experience with audit and compliance programs, including leading audits and remediation efforts
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
• Excellent and effective communication skills
• Ability to work effectively in diverse, multi-national and virtual environments
• Self-motivated and tenacious
• Demonstrate sound judgment and integrity
• Ability to influence delivery personnel in the execution of security and compliance requirements
• Experience as a Security consultant, architect and/or engineer
• Experience in working with security management including information governance and compliance
• Deep understanding and working knowledge of information security industry best practices with hands on experience
• Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
• Knowledge of security audit and accreditation processes
• Ability to adapt to new security regimes.
• SIMM and SAM working compliance experience

What you should expect in this role

• Remote position (US only)
• Opportunities to travel through your work (0-10%)
• Video cameras must be used during all interviews, as well as during the initial week of orientation
• The deadline to submit applications for this posting is 10/30/2026

The pay range for this position is $90,000 - $129,000 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits , and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You’ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. Gainwell Technologies defines “wages” and “wage rates” to include “all forms of pay, including, but not limited to, salary, overtime pay, bonuses, stock, stock options, profit sharing and bonus plans, life insurance, vacation and holiday pay, cleaning or gasoline allowances, hotel accommodations, reimbursement for travel expenses, and benefits.