Overview In this role, you drive security governance and remediation efforts to ensure compliant, high-quality security outcomes for client accounts. You'll lead security tooling delivery, manage incidents and audits, and coordinate cross-functional stakeholders to avoid penalties and protect sensitive information. You will build and maintain an account security plan and report on security metrics to meet contractual commitments. The role blends governance, risk management, and advisory work within a mission-driven healthcare tech environment.
Compensation / Benefits- flexible vacation policy
- 401(k) employer match
- comprehensive health benefits
- educational assistance
- leadership and technical development academies
- remote position (US only)
Responsibilities- Lead security operational governance activities and remediation efforts with SLA/SLO adherence
- Oversee compliance-focused security operations and policy implementation
- Ensure delivery excellence in security tooling and business operations to avoid non-performance or penalties
- Manage relationships with Gainwell suppliers and clients
- Develop and maintain an account security plan for assigned accounts and products
- Manage security incident lifecycle from detection through resolution
- Lead audit preparedness, facilitation, and remediation efforts
- Manage security risks and exceptions and escalate issues as needed
- Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
- Coordinate delivery of security metrics and reporting to support contractual commitments
Key requirements- 10+ years in risk management, audit, security, or technical delivery roles
- Bachelor or Master's degree in Computer Science, Computer Studies, Information Security or equivalent
- Experience with security and auditing regulations
- Experience with audit and compliance programs, including leading audits and remediation
- Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
- Excellent and effective communication skills
- Ability to work effectively in diverse, multinational and virtual environments
- Self-motivated and tenacious; sound judgment and integrity
- Ability to influence delivery personnel in security and compliance execution
- Experience as a Security consultant, architect, or engineer; information governance and compliance
- Deep knowledge of information security best practices; hands-on experience
- Experience with security processes and standards, notably NIST 800-53 and/or ISO27001
- Knowledge of security audit and accreditation processes; ability to adapt to new security regimes
- SIMM and SAM working compliance experience
- strong communication
- adaptability to diverse environments
- collaboration and teamwork
- NIST 800-53
- ISO27001
- HIPAA
