Chief Information Security Officer (83285)

Centurion is proud to be a leading provider of comprehensive healthcare services to correctional facilities, state hospitals, and community mental health centers nationwide.

---

Position Summary

Centurion is seeking an experienced, strategic, and execution-oriented Chief Information Security Officer (CISO)
to lead and mature our enterprise security program across a complex, multi-state healthcare environment. This leader will be responsible for cybersecurity operations, risk management, security engineering, incident response, governance, and security strategy in support of a growing and evolving organization.

The CISO will serve as a key leader within the IT organization, working closely with infrastructure, applications, service delivery, compliance, operations, and executive leadership to protect Centurion’s systems, data, and business operations. This role requires a leader who can balance strategy with execution, build strong internal and external partnerships, hold teams accountable, and drive measurable security outcomes.

This is not a theoretical security role. We are looking for a practical, high-impact leader who understands how to build and operationalize security in a healthcare environment where reliability, responsiveness, and sound judgment matter.

---

Key Responsibilities:

Security Strategy & Leadership

• Lead the development, execution, and ongoing maturity of Centurion’s enterprise cybersecurity strategy, roadmap, and operating model.
• Align security initiatives with business priorities, regulatory requirements, operational realities, and the broader IT strategy.
• Serve as the senior leader responsible for day-to-day security direction, decision-making, and program accountability.
• Advise the CIO and executive leadership on security posture, emerging threats, material risks, and investment priorities.
• Build a culture of accountability, responsiveness, and continuous improvement across the security function.
• Lead the security vendor management lifecycle, assist in shaping strategy, governance, performance accountability, and long-term partnerships.

Security Operations & Incident Response

• Lead security operations across monitoring, detection, investigation, containment, response, and recovery activities.
• Oversee relationships and operating effectiveness with managed security partners and service providers, ensuring strong performance, clear escalation, and meaningful outcomes.
• Ensure effective use of security monitoring and SIEM platforms, including Google Chronicle and related detection and response capabilities.
• Establish and maintain clear incident response procedures, escalation paths, communication protocols, and after-action review processes.
• Drive improvements in threat detection, alert triage, response speed, and operational resilience.

Security Engineering & Architecture

• Partner with infrastructure and enterprise technology teams to design and implement secure, scalable, and supportable security controls.
• Lead security engineering efforts across endpoint protection, identity and access management, network security, email security, vulnerability management, cloud security, logging, and data protection.
• Ensure security solutions are integrated thoughtfully into the enterprise environment without creating unnecessary operational burden or complexity.
• Support modernization efforts by embedding security into cloud strategy, Microsoft ecosystem initiatives, enterprise applications, and future digital platforms.

Risk, Governance & Compliance

• Establish a pragmatic and business-relevant approach to cyber risk management, control assessment, and remediation tracking.
• Partner with internal stakeholders to support HIPAA, healthcare security requirements, contractual obligations, audits, and policy compliance.
• Maintain and evolve security policies, standards, procedures, and governance processes to reflect the needs of a modern healthcare enterprise.
• Present clear, actionable reporting on risk, incidents, vulnerabilities, and program maturity to executive leadership.
• Demonstrated expertise enabling and operationalizing NIST frameworks, including 800-171 and 800-53, with hands on experience supporting FedRAMP & GovRAMP compliance
• Lead vulnerability management and remediation governance, ensuring risks are identified, prioritized, tracked, and resolved in partnership with system owners.

Identity, Access & Data Protection

• Oversee strategy and operational controls related to identity governance, privileged access, authentication, and role-based access.
• Ensure appropriate safeguards are in place to protect sensitive business and healthcare information across systems, users, devices, and third parties.
• Partner with application and operational leaders to strengthen data security practices while maintaining business usability.

Team Development & Cross-Functional Leadership

• Build, lead, and mentor a high-performing security team with clear expectations, strong ownership, and a service-oriented mindset.
• Develop internal talent and create scale through effective processes, prioritization, and smart use of partners and platforms.
• Collaborate effectively with leaders across infrastructure, field operations, enterprise applications, service desk, compliance, legal, HR, and business operations.
• Act as a trusted escalation point for complex security matters and critical business decisions.