Remote Information Security Officer (ISO) & Compliance Lead

Gainwell Technologies LLC; Ohio; Remote; USD 90,000 - 129,000; Full time

Job summary

Gainwell Technologies seeks a senior security program lead to drive governance, remediation, and compliance across risk, audit, and technical delivery teams. You will manage audits, HIPAA/NIST standards, and security incident response in a remote, US-only role with some travel.

The position emphasizes contract adherence, data protection, and cross-functional collaboration. You will leverage deep knowledge of security frameworks, regulatory requirements, and industry best practices to influence

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience).
• Experience with security and auditing regulations and compliance programs, including leading audits and remediation efforts.
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
• Excellent communication skills and ability to work in diverse, virtual environments.

Responsibilities

• Lead Security operational governance activities.
• Drive security remediation efforts and SLA/SLO adherence.
• Ensure compliance, operational focus and security-driven delivery.
• Manage security incidents from start to finish and report outcomes.
• Coordinate security metrics and reporting to meet contractual commitments.
• Manage audit preparation, facilitation and remediation.
• Oversee security risks and exceptions with recommended mitigations.
• Maintain knowledge of security fundamentals, policies, and standards (regulatory and contractual).
• Escalate and resolve security issues and influence delivery teams.

Skills

Risk management

Audit & compliance

Security expertise

HIPAA familiarity

NIST familiarity

Communication skills

Global collaboration

Judgment & integrity

Influence delivery

Security consulting

Education

Bachelor’s/Master’s in CS or InfoSec

Tools

NIST 800-53

ISO27001

Job description

Gainwell Technologies seeks a senior security program lead to drive governance, remediation, and compliance across risk, audit, and technical delivery teams. You will manage audits, HIPAA/NIST standards, and security incident response in a remote, US-only role with some travel.

The position emphasizes contract adherence, data protection, and cross-functional collaboration. You will leverage deep knowledge of security frameworks, regulatory requirements, and industry best practices to influence