Information Systems Security Officer (MMIS)

Experteer Overview As Information Systems Security Officer, you will protect critical data and ensure compliance with security policies across Medicaid-related systems. You will lead the program’s security planning, governance, risk and compliance activities, aligning with federal, state, and Medicaid requirements. You will collaborate with GRC, privacy, and data governance teams to implement policy, manage vulnerabilities, and support audits. This role offers impact at scale within a mission-driven organization and requires leadership in security policy across the program. Compensation / Benefits * Own the client’s Governance, Risk, and Compliance (GRC) platform and ensure ongoing compliance * Maintain adherence to the Medicaid Enterprise Security policy and coordinate with the client’s ISO and GRC teams * Plan and direct System Security for the solution and lead compliance with state/federal security requirements * Lead in security policy compliance, audits, and security testing * Ensure integration with Data Governance, Privacy, and Security tools * Develop and maintain policies to support Medicaid Enterprise Security Policy * Oversee daily program operations and development; monitor compliance and mitigate risk via POA&M activities * Coordinate risk management and remediation activities to close vulnerabilities Tasks * Five years of professional information security compliance experience * Two years of direct HIPAA compliance experience * Knowledge of NIST, federal information security policies, HIPAA, and related privacy/security laws * Bachelor’s degree in information technology, health information management, or equivalent * CISSP or CISM certification Key requirements * health insurance coverage * voluntary dental and vision programs * life and disability insurance * retirement savings plan * paid holidays * paid time off (PTO) or vacation/sick time

aaas_ integration with Data Governance, Privacy, and Security tools * Develop and maintain policies to support Medicaid Enterprise Security Policy * Oversee daily program operations and development; monitor compliance and mitigate risk via POA&M activities * Coordinate risk management and remediation activities to close vulnerabilities Tasks * Five years of professional information security compliance experience * Two years of direct HIPAA compliance experience * Knowledge of NIST, federal information security policies, HIPAA, and related privacy/security laws * Bachelor’s degree in information technology, health information management, or equivalent * CISSP or CISM certification Key requirements * health insurance coverage * voluntary dental and vision programs * life and disability insurance * retirement savings plan * paid holidays * paid time off (PTO) or vacation/sick time