Principal Information Security Analyst

Remote Role

CALIFORNIA ONLY: SIMM and SAM working compliance experience
Previous work with or within California Department of Health Services and or Welfare program is a plus

Business Environment:
Gainwell is a leading health care technology services provider delivering business solutions to health care clients in the United States. Gainwell Technologies delivers one of the industry's broadest portfolios of health care applications and business process services available on the market today.

Objectives:
As the Senior Information Security Officer (ISO), you will be accountable for all security-related compliance and delivery for the customer(s) assigned. In a typical engagement, you operate as a trusted advisor and security partner in the organization, working with senior management and focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The Senior ISO helps interpret and explain operational issues and plans next steps from an information security viewpoint. This requires the ability to interact and influence at an executive management level within client organizations such as C-level IT leadership and IT Security leads. You will be able to demonstrate industry expertise and your working knowledge of security governance and compliance. Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework are the standard security frameworks that the Senior ISO will be reviewing, maintaining, and helping to assess on each designated account or health care product within *** and its partners.

Primary Responsibilities:
Lead Security operational governance activities
Drive security remediation efforts and SLA/SLO adherence
Compliance, operationally focused and security driven
Relationship management with *** suppliers and the client.
Presentation skills that invoke confidence and provide clear Gainwell messaging
Create and maintain an account security plan for the selected account(s) and Products
Manage and report security incidents from start to finish
Manage audit preparation, facilitation and remediation
Manage security risks and exceptions
Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)
Escalate and resolve security issues
Coordinate delivery of security metrics and reporting in support of contractual commitment

Preferred skills
Experience in IT outsourcing business or 8+ years in industry vertical
CISSP certification, CISM/CISA or CRISC a plus

Minimum Requirements
The following experience is essential:
CALIFORNIA ONLY: SIMM and SAM working compliance experience
Previous work with or within California Department of Health Services and or Welfare program is a plus
At least 10 years’ experience working in a risk management, audit, security, or technical delivery role
Bachelor or master’s degree in Computer Science, Computer Studies, Information Security (or equivalent combination of education and experience)
Experience with and understanding of the security and auditing regulations
Experience with audit and compliance programs, including leading audits and remediation efforts
Experience with HIPAA, NIST, MARS-E/ARC-AMPE, and FedRAMP
Excellent and effective communication skills
Ability to work effectively in diverse, multi-national and virtual environments
Self-motivated and tenacious
Demonstrate sound judgment and integrity
Ability to influence delivery personnel in the execution of security and compliance requirements
Experience as a Security consultant, architect and/or engineer
Experience in working with security management including information governance and compliance
Deep understanding and working knowledge of information security industry best practices with hands on experience
Experience of security processes and standards, in particular NIST 800-53 and/or ISO27001
Knowledge of security audit and accreditation processes
Ability to adapt to new security regimes.

The following experience is highly desired:
Experience of working with NIST 800-53/ISO27001 auditors and of the audit process
Experience of work as a security consultant
Experience of presenting at C-level client meetings
Experience of translating contractual security requirements to deliverables.
Organizational Linkage:
Functionally reports to the Senior Leadership part of the office of the Chief Business Information Security Officer (CBISO) to coordinate effort, solutions, and promote Security Practices.
Works in conjunction with the Client Delivery Leader (CDL)
Partners and collaborates with Information Security staff and partners to leverage existing solutions and promote common standards.

EEO:
“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”