Senior Director, Information Security Delivery - Sector Lead

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

Summary

The Sr. Director, Information Security Delivery – Sector Lead is a transformative executive leader responsible for the strategic oversight and execution of all security activities across a defined sector of client accounts. This role is accountable for driving security excellence, standardization, and measurable business value through a team of Information Security Officers (ISOs) who directly manage security for individual accounts. Reporting to the VP, Chief Business Information Security Officer, this leader will help shape a new culture of security transformation which will position security as a business enabler and client differentiator. 

The Sr. Director will play a pivotal role in supporting the enterprise Vulnerability Management Program, ensuring sector alignment and execution, while fostering a culture of accountability, innovation, and continuous improvement. Frequent engagement with senior client stakeholders and Gainwell leadership is essential to ensure strategic alignment and delivery excellence. Healthcare experience is essential, with a strong preference for Medicaid expertise and familiarity with working alongside state and federal government entities.

Your role in our mission

• Serve as the security authority for all accounts within the assigned sector.
• Support and drive the transformation of security into a business value add, emphasizing proactive risk management, innovation, and client differentiation.
• Navigate complex regulatory environments and collaborate with state and federal government agencies to ensure alignment and compliance.
• Promote security as a strategic business enabler through thought leadership, client engagement, and internal advocacy.
• Drive consistency and standardization across accounts, reducing variation and improving efficiency.
• Define and enforce clear metrics that drive informed decision-making and continuous improvement.
• Lead the development and use of sector specific dashboards to provide real-time visibility into security posture, performance, and risk.
• Represent the security program in client meetings, governance forums, and strategic discussions.
• Tailor security strategies and communications to meet client-specific needs and expectations, especially in healthcare and Medicaid environments.
• Develop and implement client engagement frameworks that promote proactive communication, responsiveness, and trust-building.
• Collaborate with client leadership to co-create security strategies that align with business goals and regulatory requirements.
• Monitor and evaluate client satisfaction metrics, using feedback to continuously improve security services and delivery.
• Empower ISO teams to act as trusted advisors to clients, providing insights, recommendations, and thought leadership in security.
• Represent the sector in client escalations and strategic forums, ensuring timely resolution and alignment with client expectations.
• Promote the visibility of security achievements and innovations to clients, reinforcing the value of Gainwell’s security program.
• Ensure security deliverables are not only compliant and effective but also presented in a way that builds client confidence and trust.
• Ensure ISO teams are aligned with vulnerability management processes, including identification, prioritization, remediation, and reporting.
• Champion the integration of vulnerability management into account level security strategies, ensuring alignment with business risk and regulatory requirements.
• Collaborate with infrastructure, application, cloud, and business teams to ensure cross-functional coordination and timely resolution of vulnerabilities.
• Support the development and enforcement of standardized vulnerability lifecycle processes across the sector.
• Participate in vulnerability g