Senior Regional Information Security Manager - Gainwell Technologies : Job Details

Date: Jan 13, 2025

Location: Any city, TX, US, 99999

Great companies need great teams to propel their operations. Join the group that solves business challenges and enhances the way we work and grow. Working at Gainwell carries its rewards. You'll have an incredible opportunity to grow your career in a company that values your contributions and puts a premium on work flexibility, learning, and career development.

As a Senior Regional Information Security Manager (RISM), you will be accountable for all security-related deliverables and compliance requirements for the accounts in your assigned region. In a typical engagement, you operate as a leader and trusted advisor in the organization, working with executive leadership and senior management, focusing specifically on health care industry regulated security requirements and environments in relation to client business objectives. The RISM helps understand and mitigate operational issues and concerns, as the accountable leader, that will plan and manage the delivery for the accounts under purview. Additionally, as a Senior RISM, responsibilities may include support of special information security projects and programs assigned as part of the Office of the Chief Information Security Officer (CISO) at leadership discretion.

This requires the ability to interact and influence at a senior managerial level within client organizations such as Information Governance and IT Security leads. You will be able to demonstrate industry expertise and understanding of security governance and compliance. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the National Institute of Standards and Technology (NIST) 800-53 framework is what the Information Security Organization will be reviewing, maintaining, and helping to assess on each designated account or health care product within Gainwell Technologies and its partners.

• Lead Security operational governance activities of multiple Accounts and/or Products.
• Escalation contact for designated region and accounts that align under the region.
• Multi-3rd party services and supplier management.
• Driving delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance contractual penalties).
• Ensure that vulnerability management aligns with account service level agreements (SLAs).
• Relationship management with Gainwell Technologies suppliers to clients.
• Ensure that the account security plan for the selected account(s) and Products is current and effective.
• Manage and report security incidents to upper management, engaging as a point of leadership for incidents.
• Ensure Audit preparation, facilitation, and remediation for each account and Product(s).
• Escalation contact for all Security and Compliance within the given region and/or Product(s).
• Manage Security Risk and Exception to standards management.
• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual).
• Escalate and resolve Security Incidents with the Security Incident Response team.
• Coordinate delivery of Security Metrics and Reporting in support of contractual commitments.

• At least 8 years management experience as a service delivery manager with 12 or more employees.
• At least 10 years' experience working in a risk management, audit, security, or technical delivery role.
• Experience as a manager of security staff, consultants, architects, and/or engineers.
• Experience in working with senior security management including information governance and compliance.
• Good understanding of Assurance Practices and Risk Management, with hands-on experience.
• Experience of security processes and standards, in particular NIST 800-53, and/or ISO27001.
• Knowledge of security audit and accreditation processes.
• Ability to adapt to new security regimes.

• Functionally reports to the Director of Information Security as part of the office of the Chief Information Security Officer (OCISO) to coordinate effort, solutions, and promote Security Practices.
• Works in conjunction with the Account Delivery Executives and Client Delivery Leaders.
• Partners and collaborates with Information Security staff and partners to leverage existing solutions and promote common standards.

The deadline to submit applications for this posting is January 20, 2025.

The pay range for this position is $122,200.00 - $174,600.00 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You'll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.

We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You'll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.

Gainwell Technologies is committed to a diverse, equitable, and inclusive workplace. We are proud to be an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We celebrate diversity and are dedicated to creating an inclusive environment for all employees.