Information security officer Jobs in USA

Business Environment

Gainwell Technologies is a leading health care technology services provider delivering business solutions to health care clients in the United States Gainwell Technologies delivers one of the industrys broadest portfolios of health care applications and business process services available on the market today

Objectives

As the Senior Information Security Officer ISO you will be accountable for all security related compliance and delivery for the customers assigned In a typical engagement you operate as a trusted advisor and security partner in the organization working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives The Senior ISO helps interpret and explain operational issues and plans next steps from an information security viewpoint This requires the ability to interact and influence at an executive management level within client organizations such as Clevel IT leadership and IT Security leads You will be able to demonstrate industry expertise and your working knowledge of security governance and compliance Health Insurance Portability and Accountability Act of 1996 HIPAA and the National Institute of Standards and Technology NIST 80053 framework are the standard security frameworks that the Senior ISO will be reviewing maintaining and helping to assess on each designated account or health care product within Gainwell Technologies and its partners

Primary Responsibilities

Lead Security operational governance activities

Drive security remediation efforts and SLASLO adherence

Compliance operationally focused and security driven

Ensuring delivery excellence in security tooling and business operations Ensuring avoidance of non performance non compliance leading to contractual penalties

Relationship management with Gainwell Technologies suppliers and the client

Presentation skills that invoke confidence and provide clear Gainwell messaging

Create and maintain an account security plan for the selected accounts and Products

Manage and report security incidents from start to finish

Manage audit preparation facilitation and remediation

Manage security risks and exceptions

Ensure knowledge and implementation of security fundamentals policies and standards regulatory and contractual

Escalate and resolve security issues

Coordinate delivery of security metrics and reporting in support of contractual commitment

Preferred skills

Experience in IT outsourcing business or 8+ years in industry vertical

CISSP certification CISMCISA or CRISC a plus

Minimum Requirements

Experience

The following experience is essential

At least 10 years experience working in a risk management audit security or technical delivery role

Bachelor or masters degree in Computer Science Computer Studies Information Security or equivalent combination of education and experience

Experience with and understanding of the security and auditing regulations

Experience with audit and compliance programs including leading audits and remediation efforts

Experience with HIPAA NIST MARSEARCAMPE and FedRAMP

Excellent and effective communication skills

Ability to work effectively in diverse multinational and virtual environments

Self motivated and tenacious

Demonstrate sound judgment and integrity

Ability to influence delivery personnel in the execution of security and compliance requirements

Experience as a Security consultant architect and or engineer

Experience in working with security management including information governance and compliance

Deep understanding and working knowledge of information security industry best practices with hands on experience

Experience of security processes and standards in particular NIST 80053 and or ISO27001

Knowledge of security audit and accreditation processes

Ability to adapt to new security regimes

CALIFORNIA ONLY SIMM and SAM working compliance experience

Previous work with or within California Department of Health Services and or Welfare program is a plus

The following experience is highly desired

Experience of working with NIST 80053ISO27001 auditors and of the audit process

Experience of work as a security consultant

Experience of presenting at Clevel client meetings

Experience of translating contractual security requirements to deliverables

Organizational Linkage

Functionally reports to the Senior Leaders as part of the office of the Chief Business Information Security Officer CBISO to coordinate effort solutions and promote Security Practices

Works in conjunction with the Client Delivery Leader CDL

Partners and collaborates with Information Security staff and partners to leverage existing solutions and promote common standards