Chief Information Security Officer

Location: Sterling

Centurion is proud to be a leading provider of comprehensive healthcare services to correctional facilities, state hospitals, and community mental health centers nationwide.

Position Summary Centurion is seeking an experienced, strategic, and execution-oriented Chief Information Security Officer (CISO) to lead and mature our enterprise security program across a complex, multi-state healthcare environment. This leader will be responsible for cybersecurity operations, risk management, security engineering, incident response, governance, and security strategy in support of a growing and evolving organization.

The CISO will serve as a key leader within the IT organization, working closely with infrastructure, applications, service delivery, compliance, operations, and executive leadership to protect Centurion’s systems, data, and business operations. This role requires a leader who can balance strategy with execution, build strong internal and external partnerships, hold teams accountable, and drive measurable security outcomes.

This is not a theoretical security role. We are looking for a practical, high-impact leader who understands how to build and operationalize security in a healthcare environment where reliability, responsiveness, and sound judgment matter.

Key Responsibilities:

Security Strategy & Leadership Lead the development, execution, and ongoing maturity of Centurion’s enterprise cybersecurity strategy, roadmap, and operating model.

Align security initiatives with business priorities, regulatory requirements, operational realities, and the broader IT strategy.

Serve as the senior leader responsible for day-to-day security direction, decision-making, and program accountability.

Advise the CIO and executive leadership on security posture, emerging threats, material risks, and investment priorities.

Build a culture of accountability, responsiveness, and continuous improvement across the security function.

Lead the security vendor management lifecycle, assist in shaping strategy, governance, performance accountability, and long-term partnerships.

Security Operations & Incident Response Lead security operations across monitoring, detection, investigation, containment, response, and recovery activities.

Oversee relationships and operating effectiveness with managed security partners and service providers, ensuring strong performance, clear escalation, and meaningful outcomes.

Ensure effective use of security monitoring and SIEM platforms, including Google Chronicle and related detection and response capabilities.

Establish and maintain clear incident response procedures, escalation paths, communication protocols, and after-action review processes.

Drive improvements in threat detection, alert triage, response speed, and operational resilience.

Security Engineering & Architecture Partner with infrastructure and enterprise technology teams to design and implement secure, scalable, and supportable security controls.

Lead security engineering efforts across endpoint protection, identity and access management, network security, email security, vulnerability management, cloud security, logging, and data protection.

Ensure security solutions are integrated thoughtfully into the enterprise environment without creating unnecessary operational burden or complexity.

Support modernization efforts by embedding security into cloud strategy, Microsoft ecosystem initiatives, enterprise applications, and future digital platforms.

Risk, Governance & Compliance Establish a pragmatic and business-relevant approach to cyber risk management, control assessment, and remediation tracking.

Partner with internal stakeholders to support HIPAA, healthcare security requirements, contractual obligations, audits, and policy…