Job Title: Manager - Cybersecurity
Location: East Coast – Remote
About Centric Software:
Centric Software stands at the forefront of innovation, delivering cutting-edge PLM solutions tailored specifically for the retail, fashion, footwear, luxury, and consumer goods industries. Our enterprise software applications are designed to meet the unique challenges of the fast-moving consumer goods market, empowering businesses to manage, optimize, and execute their critical processes with ease.
From concept to production, our software solutions streamline the journey of bringing products to life. We support our customers in effectively managing materials, sourcing, quality, and pricing, ensuring every step leads to a successful final catalog. With Centric Software, businesses can navigate the complexities of product development with confidence and agility. www.centricsoftware.com
Job Summary:
We are seeking a seasoned Cybersecurity Manager with a minimum of 10 years of experience to lead our cybersecurity and Information Security Management System (ISMS) initiatives. The ideal candidate will have a proven track record of managing and mentoring teams in startups or mid-sized companies, a strong collaborative mindset, and deep expertise in cloud security across all major cloud providers (AWS, Azure, GCP). This role requires strategic vision, hands-on expertise, and the ability to align security practices, including the ISMS, with organizational goals.
Key Responsibilities:
- Lead, mentor, and manage a high-performing cybersecurity team.
- Foster a collaborative and innovative team environment.
- Recruit, onboard, and develop cybersecurity talent to meet evolving business needs.
- Develop and execute the organization’s cybersecurity strategy in alignment with business objectives.
- Establish, enforce, and continuously improve security policies, procedures, and controls.
- Monitor and report on the effectiveness of cybersecurity initiatives to senior management.
- Design, implement, and manage robust security architectures across AWS, Azure, and GCP.
- Oversee cloud security posture management and ensure compliance with industry best practices.
- Collaborate with DevOps and engineering teams to integrate security into cloud environments and workflows.
- Oversee the implementation, maintenance, and continual improvement of the organization’s ISMS in compliance with ISO 27001.
- Develop and maintain ISMS documentation, including policies, procedures, and records.
- Ensure the ISMS aligns with the organization’s business goals and risk management strategies.
- Prepare for and lead internal and external audits related to the ISMS and other security frameworks.
- Identify, assess, and mitigate cybersecurity risks across the organization.
- Lead risk assessments and maintain the organization’s risk treatment plan.
- Stay ahead of emerging threats and implement proactive measures to protect systems and data.
- Develop and maintain the organization’s incident response plan.
- Lead the response to security incidents, ensuring timely containment, eradication, and recovery.
- Conduct post-incident reviews to identify root causes and implement preventive measures.
- Work closely with IT, engineering, product, legal, and compliance teams to integrate cybersecurity and ISMS practices across the organization.
- Act as the primary point of contact for cybersecurity and ISMS-related matters with internal and external stakeholders, including auditors and regulatory bodies.
- Promote a culture of cybersecurity and information security awareness throughout the organization.
- Ensure compliance with relevant security standards and regulations (e.g., ISO 27001, SOC 2, GDPR, NIST).
- Develop and deliver security awareness programs for employees and contractors.
- Provide regular reports to senior management on the organization’s security posture and ISMS performance.
- Evaluate and implement cutting-edge cybersecurity technologies to enhance the organization’s security posture.
- Champion automation and scalability in security processes to support the growth of the organization.
Qualifications and Requirements:
- Minimum of 10 years of experience in cybersecurity, with at least 5 years in leadership roles.
- Proven experience leading and growing cybersecurity teams in startups or mid-sized companies.
- Demonstrated expertise in cloud security across AWS, Azure, and GCP.
- Hands-on experience managing an ISMS and leading ISO 27001 certification or audits.
- Strong understanding of cybersecurity frameworks, ISMS implementation, and regulatory compliance.
- Exceptional leadership, collaboration, and communication skills.
- Ability to manage complex security projects and priorities in dynamic environments.
- Hands-on expertise in securing cloud infrastructures and managing multi-cloud environments.
- Bachelor’s degree in information security, Computer Science, or a related field.
- Master’s degree (preferred).
Certifications:
- Relevant certifications such as CISSP, CISM, CCSP, or AWS Certified Security Specialty are highly desirable
- ISO 27001 Lead Implementer or Lead Auditor certification is strongly preferred.
Centric Software provides equal employment opportunities to all qualified applicants without regard to race, sex, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status or genetic information.
