Information Security Officer

Summary

The Information Security Officer is responsible for management of the Contractor’s Information Security Office and ensuring compliance with the contract’s Information Security requirements.

Your role in our mission

• Compliance and operational focused.
• Lead Security operational governance activities, Multi-3rd party services, and Dedicated or shared (industry) services. 
• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance contractual penalties).
• Relationship management with Gainwell Technologies suppliers to client.
• Maintain an account security plan for the selected account(s) and Products.
• Manage and report security incidents.
• Ensure Audit preparation, facilitation and remediation.
• Manage Security Risk and Exception to standards management.
• Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual).
• Escalate and resolve Security Incidents with the Security Incident Response team.
• Coordinate delivery of Security Metrics and Reporting in support of contractual commitment.

What we're looking for

• Five (5) years' experience in computing or related area, with a focus on information security, technology, management and policy including but not limited to: experience in the development and implementation of planning security policy, procedure, and/or safeguards; extensive knowledge of security administration and computer security tools; successful experience in retrieving, analyzing, reporting, addressing and/or tracking security intrusions and vulnerabilities; demonstrated knowledge in systems design, development, documentation, testing, implementation, and/or maintenance; demonstrated ability to work effectively with technical and non- technical managerial and professional staff.
• Three (3) years of proven technical and functional problem solving, tracking, and resolution skills, demonstrating the ability to manage complex projects.
• Three (3) years of demonstrated excellent verbal, written, and presentation communication skills.
• Three (3) years of experience in technology management or information security in both government and healthcare environments, including substantial experience with HIPAA, FIPS, FISMA, FedRAMP, NIST, and NIST CSF.
• Three (3) or more years' experience in at least three (3) of the following domains in the Certified Information Systems Security Professional certificate: Asset Security, Security and Risk Management, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, Software Development Security
• One (1) or more of the following certifications: CISM (Certified Information Security Manager), GIAC (Global Information Assurance Certificate), SSCP (Systems Security Certified Practitioner), CISA (Certified Information Systems Auditor), CISSP (Certified Information Systems Security Professional)

What you should expect in this role

• This role is remote with frequent travel to Sacramento, CA or willingness to relocate.
• Functionally reports to the Information Security Leader as part of the office of the Chief Information Security Officer (OCISO) to coordinate effort, solutions, and promote Security Practices.
• Works in conjunction with the Account Delivery Executive 
• Partners and collaborates with Information Security staff and partners to leverage existing solutions and promote common standards.

The deadline to submit applications for this posting is November 30, 2024.

Ideal candidates will have a desire and the applicable skills to perform their job responsibilities within the context of maintenance and operations of a large-scale legacy mainframe system, followed by opportunities for incremental modernization to current technologies and improved operational performance over time.