Senior Security Governance & Compliance Lead (Remote)

Gainwell Technologies; Virginia; Remote; USD 127,000 - 181,000; Full time

Benefits offered by this job

Remote position (US only)

Travel 0-10%

Educational assistance

Flexible vacation policy

401(k) match

Comprehensive health benefits

Job summary

Gainwell Technologies is seeking an Information Security Officer (ISO) to lead governance, remediation, and compliance across sensitive healthcare programs for US accounts. This remote role emphasizes security operations, risk management, and reporting, with travel limited to 0-10% and a focus on contractual security commitments.

The ideal candidate has 10+ years in risk or security delivery, a degree in CS or Info Security, and hands-on experience with HIPAA, NIST, FedRAMP, and ISO27001.

Qualifications

• At least 10 years’ experience in risk management, audit, security, or technical delivery.
• Bachelor or master’s degree in Computer Science, Information Security, or equivalent.
• Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP.
• Experience leading audits and remediation efforts.
• Excellent communication and ability to work in diverse, virtual environments.
• Knowledge of information security best practices and standards (NIST 800-53, ISO27001).

Responsibilities

• Lead security governance and remediation efforts with SLA/SLO adherence.
• Manage security incidents from start to finish and audit preparation.
• Coordinate delivery of security metrics and reporting for contractual commitments.
• Engage with suppliers and clients to ensure security controls align with requirements.
• Develop and maintain an account security plan for assigned accounts and products.

Skills

Risk management

Audit and compliance

Security governance

Communication skills

Virtual collaboration

Influence delivery teams

Education

Bachelor's or Master's in Computer Science/Info Security

Job description

Gainwell Technologies is seeking an Information Security Officer (ISO) to lead governance, remediation, and compliance across sensitive healthcare programs for US accounts. This remote role emphasizes security operations, risk management, and reporting, with travel limited to 0-10% and a focus on contractual security commitments.

The ideal candidate has 10+ years in risk or security delivery, a degree in CS or Info Security, and hands-on experience with HIPAA, NIST, FedRAMP, and ISO27001.