Experienced Security Compliance - HITRUST

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Summary

As a Security Compliance at Gainwell, you can contribute your skills as we harness the power of technology to help our clients improve the health and well-being of the members they serve — a community’s most vulnerable. Connect your passion with purpose, teaming with people who thrive on finding innovative solutions to some of healthcare’s biggest challenges. Here are the details on this position.

Your role in our mission

Essential Job Functions

• Execute assessment self-assessments that include a review of controls based on HITRUST CSF, NIST 800 series, HIPAA Security Rules, and AICPA’s SOC1/2 control frameworks.
• Assist Auditor/Assessor/Customers with coordination of information requests towards independent audits and customer inquiries.
• Participate in other projects as assigned that include remediation planning, project management for system implementation, validation of security controls, and management reporting.
• Oversees maintaining of current set of valid users, issuing and recalling certificates and secure identifications to and from individual users and defining groups. Ensures passwords are reset as needed to maintain appropriate access control. Coordinates the visitor control process to ensure that only authorized personnel are granted access to security information including badge requirements.
• Coordinates and monitors sensitive aspects of security programs to ensure compliance with client, government and/or company security policies and procedures. Administers the production and submission of appropriate government forms to ensure the proper guidance for the protection and handling of industrial security, NSI and other security information.
• Develops and implements security procedures, ensuring compliance with program requirements, policies, procedures and processes including personnel, physical and administrative security systems and procedures. Participates in security procedures associated with the accreditation of information systems. Conducts audits to ensure adherence.
• Ensures destruction of confidential information in accordance with policies and procedures.
• Investigates or oversee the investigation of losses and security violations and recommend corrective actions. Implements approved course of action as appropriate. Develops investigative reports and documentation as required.

What we're looking for

• Three or more years of experience in security policies and procedures, information systems security or computer operations
• Experience working with company software and hardware products
• Experience working with domain structures, user authentication and digital signatures
• Experience working with industrial and/or National Security Information security systems and implementation procedures
• Experience interacting with external and internal auditors and assessors.
• Possess a security clearance as required by contract or government regulations (i.e. at the Secret level and/or HITRUST CCSFP (Certified CSF Practitioner) certification and/or certified information security systems professional (CISSP) certification)

What you should expect in this role

• Fully Remote Opportunity with the option to work anywhere within the United States
• Opportunities to travel through your work (0-10%)
• #LI-WM1
• #LI-Remote
• Video cameras must be used during all interviews, as well as during the initial week of orientation

The pay range for this position is $90,900 - $129,900 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You’ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring