Remote Information Security Lead – Governance & Compliance

Gainwell Technologies LLC; Washington (District of Columbia); Remote; USD 101,000 - 145,000; Full time

Job summary

Gainwell Technologies LLC is seeking an Information Security Officer to lead security governance, remediation, and audit programs in a largely remote, US-only setting. The role emphasizes risk management, industry regulations, and effective collaboration across multinational teams.

The candidate will drive security incident handling, compliance initiatives, and reporting, while advancing security fundamentals, policies, and standards in alignment with HIPAA, NIST, and ISO27001 frameworks.

Qualifications

• 10+ years in risk management, audit, security, or technical delivery.
• Bachelor or master's in CS/Info Security or equivalent.
• Experience with HIPAA, NIST, MARS‑E/ARC‑AMPE, and FedRAMP.
• Experience leading audits and remediation programs.
• Excellent communication; able to work in diverse, multi-national, virtual environments.
• Knowledge of security fundamentals, policies, and standards (regulatory/contractual).
• SIMM and SAM working compliance experience.

Responsibilities

• Lead Security operational governance activities.
• Drive security remediation efforts and SLA/SLO adherence.
• Ensure compliance, operationally focused and security driven.
• Manage security incidents from start to finish; audit preparation and remediation.
• Coordinate security metrics and reporting to support contractual commitments.

Skills

Risk management

Audit & compliance

Security governance

NIST/ISO27001

Communication skills

Virtual collaboration

Security consultant

Information governance

Integrity

Sound judgement

Education

Bachelor's or Master's in CS/InfoSec

Tools

SIMM

SAM

NIST 800-53

Job description

Gainwell Technologies LLC is seeking an Information Security Officer to lead security governance, remediation, and audit programs in a largely remote, US-only setting. The role emphasizes risk management, industry regulations, and effective collaboration across multinational teams.

The candidate will drive security incident handling, compliance initiatives, and reporting, while advancing security fundamentals, policies, and standards in alignment with HIPAA, NIST, and ISO27001 frameworks.