Information Security Lead

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Summary

As an Information Security Leader (ISL), you will play a pivotal role in ensuring the seamless integration and effective utilization of Gainwell's diverse product portfolio. You will work closely with internal teams and external stakeholders to understand product functionalities, address concerns, and optimize solutions across various domains, including healthcare, data analysis, and client support services. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives.

The ISL helps understand operational issues and plans next steps from an information security viewpoint. This requires the ability to interact and influence at a managerial level within client organizations such as Information Governance and IT Security leads. You will demonstrate industry expertise and understanding of the security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework is what the ISL will be analyzing and enforcing, maintaining, and helping to assess on each designated account or health care product within Gainwell Technologies and its partners.

Your role in our mission

• Data Security and Compliance: Educate stakeholders on the importance of safeguarding PHI/PII data embedded within Gainwell products. Implement and enforce compliance measures to mitigate risks associated with sensitive information.
• Client Support and Communication: Serve as a primary point of contact for clients regarding product functionalities, updates, and troubleshooting. Communicate effectively with internal teams to address client concerns and optimize product performance.
• Enhancement and Innovation: Collaborate with product development teams to identify opportunities for product enhancement and innovation based on client feedback and industry trends. Contribute to the roadmap of Gainwell products by providing insights into market demands and emerging technologies.
• Lead Security operational governance activities.
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance contractual penalties).
• Maintain an account security plan and other security related documentation for the selected account(s) and Products.
• Ensure Audit and penetration assessment preparation, facilitation, and remediation.
• Manage security risk and exceptions to security standards within the organization and third-party risk. To include vulnerabilities, defects, and exploits.
• Ensure knowledge sharing and implementation of security fundamentals, policies, and standards (regulatory and contractual).
• Escalate and resolve Security Incidents with the Security Incident Response (SIR) team and Account Executives (AE).
• Manage and report security incidents.
• Coordinate delivery of Security Metrics and Reporting in support of contractual commitments.
• Documentation including writing policies, standards, procedures, process, and security plans.

What we're looking for

• At least 7 years’ experience working in a risk management, audit, security, or technical delivery role. Experience as a Security consultant, architect and/or engineer.
• Experience in working with security management including information governance and compliance.
• Good understanding of Assurance Practices and Risk Management, with hands on experience.
• Experience with security processes and standards, in particular NIST 8