Remote InfoSec Officer - Governance

Gainwell Furniture Co.; Grand Rapids (MI); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible vacation policy

401(k) employer match

Comprehensive health benefits

Educational assistance

Leadership and technical development"

Remote position (US only)

Job summary

Gainwell Furniture Co. is seeking a senior security governance professional to drive security governance, remediation, and advisory work across client accounts. You will lead security tooling delivery, manage incidents and audits, and coordinate cross-functional stakeholders to meet contractual commitments.

The role emphasizes governance, risk management, and advisory capabilities within a healthcare tech environment, with a remote US-only work option.

Qualifications

• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP requirements.
• Strong communication and advisory skills for cross-functional teams.
• Proven ability to lead audits and remediation programs.

Responsibilities

• Lead security governance and remediation efforts with SLA/SLO adherence.
• Oversee compliance-focused security operations and policy implementation.
• Ensure delivery excellence in security tooling and business operations to avoid penalties.
• Manage relationships with Gainwell suppliers and clients.
• Develop and maintain an account security plan for assigned accounts and products.
• Manage security incident lifecycle from detection through resolution.
• Lead audit preparedness, facilitation, and remediation efforts.
• Coordinate delivery of security metrics and reporting to support contractual commitments.

Skills

Risk management

Audit expertise

Security governance

Stakeholder communication

Cross-functional collaboration

Education

Bachelor's or Master's in CS/InfoSec

Job description

Gainwell Furniture Co. is seeking a senior security governance professional to drive security governance, remediation, and advisory work across client accounts. You will lead security tooling delivery, manage incidents and audits, and coordinate cross-functional stakeholders to meet contractual commitments.

The role emphasizes governance, risk management, and advisory capabilities within a healthcare tech environment, with a remote US-only work option.