Remote Information Security Officer – ISO Governance

Gainwell Technologies LLC; Tennessee; A distancia; USD 90.000 - 129.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Generous vacation policy

401(k) employer match

Comprehensive health benefits

Educational assistance

Leadership academies

Descripción de la vacante

Gainwell Technologies is seeking a Senior Security Governance Lead to drive operational governance, remediation, and compliance across security tooling and business operations for a selected account. You will manage security incidents, audits, risk reporting, and ensure alignment with contractual penalties.

The role demands experience in risk management, audits, HIPAA, NIST, FedRAMP, and ISO27001, with the ability to influence delivery teams in a multinational, virtual environment.

Formación

• 10+ years in risk, audit, security or delivery roles.
• Degree in CS, Information Security or equivalent mix.
• Experience with security regulations and audits.
• Familiar with HIPAA, NIST, FedRAMP and ISO27001.
• Strong communication and cross-functional influence.

Responsabilidades

• Lead security governance and operational oversight.
• Drive remediation efforts and SLA/SLO adherence.
• Ensure compliance and manage security incidents end-to-end.
• Prepare for audits and coordinate remediation actions.
• Report security metrics to meet contractual commitments.
• Manage relationships with suppliers and clients.
• Create and maintain an account security plan.
• Escalate and resolve security issues.
• Promote security policies across the org.

Conocimientos

Risk management

Audit & compliance

Security governance

Regulatory understanding

HIPAA knowledge

NIST/FedRAMP knowledge

ISO27001 familiarity

Communication skills

Stakeholder influence

Security incident management

Educación

Bachelor's or Master's in CS/Info Security

Herramientas

SIMM

SAM

Descripción del empleo

Gainwell Technologies is seeking a Senior Security Governance Lead to drive operational governance, remediation, and compliance across security tooling and business operations for a selected account. You will manage security incidents, audits, risk reporting, and ensure alignment with contractual penalties.

The role demands experience in risk management, audits, HIPAA, NIST, FedRAMP, and ISO27001, with the ability to influence delivery teams in a multinational, virtual environment.