Remote Information Security Lead – Compliance & Risk

Gainwell Technologies LLC; United States; Remote; USD 91,000 - 130,000; Full time

Benefits offered by this job

Flexible vacation

401(k) match

Health benefits

Educational assistance

Leadership and technical development

Job summary

Gainwell Technologies LLC is seeking an Information Security Officer (ISO) for a remote role based in the United States. You will lead security governance, drive remediation, and ensure SLA/SLO adherence while coordinating with suppliers and clients.

The role requires extensive experience in risk management, audits, and regulatory frameworks (HIPAA, NIST, FedRAMP). Exceptional communication and ability to work in diverse, virtual environments are essential.

Qualifications

• At least 10 years' experience in risk management, audit, security, or technical delivery.
• Bachelor’s or master’s degree in Computer Science, Information Security (or equivalent).
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
• Experience leading audits and remediation efforts.
• Excellent communication skills and ability to work in diverse, virtual environments.
• Knowledge of NIST 800-53 and ISO27001.
• Ability to influence delivery personnel on security and compliance requirements.
• SIMM and SAM working compliance experience.

Responsibilities

• Lead security governance activities and remediation efforts.
• Drive security remediation and SLA/SLO adherence.
• Manage and report security incidents from start to finish.
• Prepare, facilitate, and remediate audits.
• Coordinate security metrics reporting in support of contractual commitments.
• Maintain knowledge of security fundamentals, policies, and standards.

Skills

Risk management

Audit & compliance

Security delivery

Regulatory knowledge

Communication skills

Stakeholder management

Security consulting

Education

Bachelor’s or Master’s in Computer Science / Information Security

Job description

Gainwell Technologies LLC is seeking an Information Security Officer (ISO) for a remote role based in the United States. You will lead security governance, drive remediation, and ensure SLA/SLO adherence while coordinating with suppliers and clients.

The role requires extensive experience in risk management, audits, and regulatory frameworks (HIPAA, NIST, FedRAMP). Exceptional communication and ability to work in diverse, virtual environments are essential.