Advisor Security Compliance

Summary

As an Information Security Officer (ISO), you will play a pivotal role in ensuring the seamless integration and effective utilization of Gainwell's diverse product portfolio. You will work closely with internal teams and external stakeholders to understand product functionalities, address concerns, and optimize solutions across various domains, including healthcare, data analysis, and client support services. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The ISO helps understand operational issues and plans next steps from an information security viewpoint.

This requires the ability to interact and influence at a managerial level within client organizations such as Information Governance and IT Security leads. You will demonstrate industry expertise and understanding of the security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework and additional NIST frameworks is what the ISO will be analyzing and enforcing, maintaining, and helping to assess on each designated account or health care product within Gainwell Technologies and its partners.

Your role in our mission

• Oversees the development and implementation of corporate-wide application security procedures in client environments to meet corporate and government regulations.
• Ensures that application security procedures meet business requirements and that information is safeguarded against unauthorized use, disclosure or modification, and damage or loss.
• Oversees the implementation of appropriate access controls to ensure that access to systems, data and programs is restricted to authorized and trained users. Oversees the destruction of highly sensitive confidential information in accordance with policies and procedures.
• Develops and implements detailed security procedures. Oversees security administrator team to ensure compliance with client security procedures. Ensures compliance with program security requirements including personnel, physical and administrative security systems and procedures.
• Serves as a subject matter expert concerning security procedures and audit compliance.
• Coordinates sensitive aspects of corporate security programs to ensure compliance with client, government and company security policies and procedures including verifying adherence to specific policies and ensuring policy compliance with government regulations.
• Provides leadership and work guidance to less experienced personnel.
• Develops, coordinates and conducts security education programs to educate appropriate personnel about security systems and their importance.
• Investigates or oversees the investigation of losses and security violations and recommends corrective actions. Implements approved course of action as appropriate. Provides summaries for senior management review.
• Researches technological advancements to ensure that security solutions are continuously improved, supported and aligned with industry and company standards.

What we're looking for

• Bachelor's degree or equivalent combination of education and experience
• Bachelor's degree in computer science, information technology or related field preferred
• Nine or more years of experience in information systems security or computer operations
• Experience working with corporate level security systems and implementation procedures
• Experience working with corporate and government security regulations
• Experience working with company security software products
• Experience working with domain structures, user authentication, user profiles and digital signatures
• Possess a security clearance at the Secret level and/or certified information security systems professional (CISSP) certification

What you should expect in this role

• Remote work environment
• On-call work and evening work may be required

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.