Chief Information Security Officer (CISO)

Position Summary 

As the Chief Information Security Officer (CISO) at Centre Technology, you will ensure data privacy and security while maintaining compliance with regulatory and legal requirements across serviced verticals. You will direct the Managed Recurring Revenue (MRR) and Internal Systems verticals, and as a member of the Executive Leadership Team, you will be responsible for strategic planning, execution of CISO Services operations, budget planning, and management. Your role will also involve product additions and enhancements to ensure service relevance, customer satisfaction, and retention, as well as coaching and development of direct reports. 

Essential Duties and Responsibilities 

• Compliance and security driven. 

• Lead security operational governance activities. 

• Ensuring delivery excellence in security tooling and business operations (Ensuring avoidance of non-performance / non-compliance leading to contractual penalties). 

• Relationship management with Gainwell Technologies suppliers and the client. 

• Maintain an account security plan for the selected account(s) and products. 

• Report and manage security incidents. 

• Assist audit preparation, facilitation, and remediation. 

• Manage security risks and exceptions. 

• Ensure knowledge and implementation of security fundamentals, policies, and standards (regulatory and contractual). 

• Escalate and resolve security issues. 

• Coordinate delivery of security metrics and reporting in support of contractual commitment. 

Education/Experience/Certifications 

• At least 6 years' experience working in a risk management, audit, security, or technical delivery role 

• Bachelor or master's degree in computer science, Computer Studies, Information Security (or equivalent combination of education and experience) 

• Experience as a Security consultant, architect and/or engineer 

• Experience with and understanding of the security and auditing regulations 

• Experience with audit and compliance programs, including leading audits and remediation efforts 

• Experience with HIPAA, NIST, and FedRAMP 

• Excellent and effective communication skills 

• Experience in working with security management including information governance and compliance 

• Good understanding of information security industry best practices with hands on experience 

• Experience of security processes and standards, in particular, NIST 800-53, and/or ISO27001 

• Knowledge of security audit processes 

Work Environment and Physical Demands  

• Work primarily in a climate controlled environment with minimal safety/health hazard potential.  

• Occasional lifting (up to 10 pounds and occasionally lift and/or move up to 50 pounds) may be required 

• Reasonable accommodations can be made to enable individuals with disabilities/injuries to perform the essential functions of this role. 

• The noise level in the work environment is moderate. 

• Frequent regional travel required