Job FunctionsCompliance and security drivenLead security operational governance activitiesMaintain an account security plan for selected accounts and productsReport and manage security incidentsAssist audit preparation, facilitation, and remediationManage security risks and exceptionsEnsure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual)Escalate and resolve security issuesCoordinate delivery of security metrics and reporting in support of contractual commitment
Job RequirementsAt least 6 years' experience working in a risk management, audit, security, or technical delivery roleBachelor or master's degree in computer science, Computer Studies, Information Security (or equivalent combination of education and experience)Experience as a Security consultant, architect and/or engineerExperience with and understanding of the security and auditing regulationsExperience with audit and compliance programs, including leading audits and remediation effortsExperience with HIPAA, NIST, and FedRAMPExcellent and effective communication skills
SkillsAt least 6 years' experience working in a risk management, audit, security, or technical delivery roleBachelor or master's degree in computer science, Computer Studies, Information Security (or equivalent combination of education and experience)Experience as a Security consultant, architect and/or engineerExperience with and understanding of the security and auditing regulationsExperience with audit and compliance programs, including leading audits and remediation effortsExperience with HIPAA, NIST, and FedRAMPExcellent and effective communication skillsGood understanding of information security industry best practices with hands on experienceExperience of security processes and standards, in particular, NIST 800-53, and/or ISO27001Knowledge of security audit processesStrong leadership abilities to manage direct reports effectivelyAbility to work collaboratively across departments and teamsExcellent problem-solving skills with the ability to think critically and creativelyStrong analytical skills with attention to detailAbility to adapt quickly to changing priorities and environmentsStrong communication skills, both written and verbal
Position Summary
As the Chief Information Security Officer (CISO) at Centre Technology, you will ensure data privacy and security while maintaining compliance with regulatory and legal requirements across serviced verticals. You will assist with directing the Managed Recurring Revenue (MRR) and Internal Systems verticals, and as a member of the Executive Leadership Team, you will be responsible for strategic planning, execution of CISO Services operations, budget planning, and management. Your role will also involve product additions and enhancements to ensure service relevance, customer satisfaction, and retention, as well as coaching and development of direct reports.
Essential Duties and Responsibilities
- Compliance and security driven.
- Lead security operational governance activities.
- Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties).
- Maintain an account security plan for the selected account(s) and products.
- Report and manage security incidents.
- Assist audit preparation, facilitation, and remediation.
- Manage security risks and exceptions.
- Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual).
- Escalate and resolve security issues.
- Coordinate delivery of security metrics and reporting in support of contractual commitment.
Education/Experience/Certifications
- At least 6 years' experience working in a risk management, audit, security, or technical delivery role
- Bachelor or master's degree in computer science, Computer Studies, Information Security (or equivalent combination of education and experience)
- Experience as a Security consultant, architect and/or engineer
- Experience with and understanding of the security and auditing regulations
- Experience with audit and compliance programs, including leading audits and remediation efforts
- Experience with HIPAA, NIST, and FedRAMP
- Excellent and effective communication skills
- Experience in working with security management including information governance and compliance
- Good understanding of information security industry best practices with hands on experience
- Experience of security processes and standards, in particular, NIST 800-53, and/or ISO27001
- Knowledge of security audit processes
Work Environment and Physical Demands
- Work primarily in a climate controlled environment with minimal safety/health hazard potential.
- Occasional lifting (up to 10 pounds and occasionally lift and/or move up to 50 pounds) may be required
- Reasonable accommodations can be made to enable individuals with disabilities/injuries to perform the essential functions of this role.
- The noise level in the work environment is moderate.
- Frequent regional travel required
Life at centretechnologies
Thrive Here & What We Value- Diverse workforce impacts overall success- Collaborative team identifies innovative solutions- Paid Time Off and Holidays- Comprehensive benefits (Medical, Dental, Vision, 401(k) with employer match)- Professional growth opportunities in a stable environment