Advisor Information Security Analyst

Remote Role

CALIFORNIA ONLY: SIMM and SAM working compliance experience
Previous work with or within California Department of Health Services and or Welfare program is a plus

Business Environment:
Gainwell is a leading health care technology services provider delivering business solutions to health care clients in the United States. Gainwell Technologies delivers one of the industry's broadest portfolios of health care applications and business process services available on the market today.
.
Objectives:
As Information Security Leader (ISO), you will be accountable for all security-related compliance and delivery for the customers assigned. In a typical engagement, you operate as a trusted advisor in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The ISO helps understand operational issues and plans next steps from an information security viewpoint.
This requires the ability to interact and influence at a managerial level within client organizations such as Information Governance and IT Security leads. You will be able to demonstrate industry expertise and understanding of the security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework is what the ISO will be reviewing, maintaining, and helping to assess on each designated account or health care product within *** and its partners.

Primary Responsibilities:
Lead Security operational governance activities
Compliance and operational focused
Dedicated or Shared (Industry)
Multi-3rd party services and supplier management
Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance contractual penalties).
Conduct and provide vulnerability management that aligns to account service level agreements (SLAs)
Relationship management with *** suppliers to client.
Maintain an account security plan for the selected account(s) and Products
Ensure Audit preparation, facilitation and remediation
Manage Security Risk and Exception to standards management
Ensure knowledge and implementation of security fundamentals, policies and standards (regulatory and contractual)
Escalate and resolve Security Incidents with the Security Incident Response team
Coordinate delivery of Security Metrics and Reporting in support of contractual commitment

Minimum Qualifications:
Education and Experience Required:
At least 8 years’ experience working in a risk management, audit, security or technical delivery role
Bachelor or master degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
Experience with security and auditing regulations
Exposure to audit and compliance programs
Excellent and effective communication skills
Ability to work effectively in diverse, multi-national and virtual environments
Self-motivated and tenacious
Demonstrate sound judgment and integrity
Ability to influence Delivery personnel in the execution of security and compliance requirements

Preferred skills
Experience in IT outsourcing business or 5+ years in industry vertical
CISSP certification, CISM/CISA or CRISC a plus
Experience with HIPAA, NIST, ARC-AMPE and FedRAMP a plus
California SIMM and SAM regulatory compliance (California specific roles)
Fluent in English

Experience
The following experience is essential:
Experience as a Security consultant, risk manager and/or security engineer;
Experience in working with security management including information governance and compliance’
Experience of security processes and standards, in particular NIST 800-53, and/or ISO27001;
Knowledge of security audit and accreditation processes;
Ability to adapt to new security regimes.

The following experience is preferred:
Experience of working with NIST 800-53/ISO27001 auditors and of the audit process;
Experience of presenting at C-level client meetings;
Experience of translating contractual security requirements to deliverables.

EEO: “Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”