Full Time (Remote)
Senior Information Security Officer (ISO)
Location: Remote
Salary: $110,000-$120,000 per year, Type - Full Time
Experience: 10+ Years
We are looking for an experienced Senior Information Security Officer (ISO) to lead security governance, risk management, audit readiness, and regulatory compliance in healthcare and IT outsourcing environments.
The ideal candidate will have strong expertise in HIPAA, NIST SP 800-53, security audits, remediation, and executive-level client engagement.
Key Responsibilities
- Lead security governance and compliance activities across assigned client accounts.
- Develop and maintain account-level security plans and compliance roadmaps.
- Manage security risks, exceptions, incidents, and remediation activities from identification through closure.
- Lead audit preparation, execution, findings management, and corrective action plans.
- Ensure adherence to security SLAs, SLOs, contractual obligations, and regulatory requirements.
- Translate contractual security requirements into actionable delivery plans and measurable outcomes.
- Monitor security metrics, prepare reports, and communicate compliance status to senior leadership.
- Advise executive stakeholders on security risks, operational challenges, and mitigation strategies.
- Coordinate with delivery teams, clients, suppliers, and information security partners.
- Drive continuous improvement in security processes, policies, and operational controls.
Must-Have Requirements
- 10+ years of experience in information security, risk management, audit, compliance, or technical delivery.
- Strong experience with healthcare security and regulatory compliance, particularly HIPAA.
- Hands-on knowledge of NIST SP 800-53 and ISO 27001 security frameworks.
- Experience with security audits, compliance assessments, risk management, and remediation programs.
- Working knowledge of FedRAMP and healthcare security requirements, including MARS-E, S-E-A-R-C-A-M-P-E (as applicable to the source requirement), and related compliance frameworks.
- Experience as a security consultant, architect, engineer, or security delivery leader.
- Strong stakeholder management and executive-level presentation skills.
- Ability to translate security policies and contractual obligations into practical implementation plans.
- Excellent communication, analytical, problem-solving, and decision-making skills.
Preferred Qualifications
- CISSP, CISM, CISA, or CRISC certification.
- Experience in IT outsourcing or managed services environments.
- Experience presenting security assessments and remediation plans to C-level stakeholders.
- Experience working with NIST SP 800-53 or ISO 27001 auditors.
- California-specific requirement: Hands-on experience with SIMM and SAM compliance.
- Previous experience supporting California health or welfare programs is an advantage.
Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.
Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.