Rate range ***/hr to ***/hr
Position Description: Senior Information Security Officer (ISO)
Lead Security operational governance activities
Drive security remediation efforts and SLA/SLO adherence
Compliance, operationally focused and security driven.Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non performance / non compliance leading to contractual penalties).Relationship management with Gainwell Technologies suppliers and the client.Presentation skills that invoke confidence and provide clear Client messaging
Create and maintain an account security plan for the selected account(s) and ProductsManage and report security incidents from start to finishManage audit preparation, facilitation and remediationManage security risks and exceptionsEnsure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)Escalate and resolve security issuesCoordinate delivery of security metrics and reporting in support of contractual commitment Preferred skills Experience in IT outsourcing business or 8+ years in industry verticalCISSP certification, CISM/CISA or CRISC a plus
Minimum Requirements At least 10 years experience working in a risk management, audit, security, or technical delivery roleBachelor or master degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)Experience with and understanding of the security and auditing regulationsExperience with audit and compliance programs, including leading audits and remediation efforts
Experience with HIPAA, NIST, MARS E/ARC AMPE, and FedRAMPExcellent and effective communication skillsAbility to work effectively in diverse, multi national and virtual environmentsSelf motivated and tenaciousDemonstrate sound judgment and integrityAbility to influence delivery personnel in the execution of security and compliance requirementsExperience as a Security consultant, architect and/or engineerExperience in working with security management including information governance and complianceDeep understanding and working knowledge of information security industry best practices with hands on experience
Experience of security processes and standards, in particular NIST 800 53 and/or ISO27001Knowledge of security audit and accreditation processesAbility to adapt to new security regimes.CALIFORNIA ONLY: SIMM and SAM working compliance experience
Previous work with or within California Department of Health Services and or Welfare program is a plus