Chief Information Security Officer

The next frontier of AI begins with Centific

Centific is a Seattle-based tech company pioneering the future of AI one breakthrough at a time. Learn how we’re transforming the world through safe and scalable AI and empowering businesses to unlock the full potential of their data.

Domain: AI Platform & Data Foundry | Sectors: Healthcare, Public Sector, Retail

Position Summary

Chief Information Security Officer (CISO)

Key Responsibilities

Security Strategy & Architecture

• Define and execute a comprehensive security strategy aligned with business goals, product architecture, and sector-specific regulatory requirements.
• Lead the design and implementation of secure-by-design principles across AI pipelines, including RAG, RLHF, HITL, and red teaming modules.

Governance & Risk Management

• Establish and maintain governance frameworks for AI model lifecycle management, including auditability, explainability, and safety scoring.
• Conduct regular risk assessments and threat modeling, particularly for AI-specific threats such as data poisoning and adversarial attacks.

Incident Response & Resilience

• Develop and lead the enterprise-wide incident response program, including detection, containment, investigation, and recovery.
• Coordinate cross-functional response to security incidents and ensure continuous improvement through post-incident reviews and simulations.

Compliance & Regulatory Alignment

• Ensure compliance with global and sector-specific regulations, including HIPAA, HITECH, GDPR, CCPA, PCI-DSS, FedRAMP, and the EU AI Act.
• Lead certification and audit readiness efforts (e.g., ISO 27001, SOC 2, HITRUST).

Sector-Specific Security Oversight

• Healthcare: Secure PHI/PII in AI-driven diagnostics, imaging, and patient engagement systems.
• Public Sector: Align with NIST 800-53 and FedRAMP for civic AI deployments and law enforcement use cases.
• Retail: Protect customer data used in personalization, sentiment analysis, and recommendation engines.

Security Awareness & Culture

• Champion a security-first culture through training, awareness campaigns, and executive engagement.
• Develop role-based security education programs tailored to engineering, product, and business teams.

Customer & Partner Trust

• Serve as the executive voice on security in customer engagements, RFPs, and co-sell partnerships.
• Lead responses to customer security questionnaires and ensure transparency in data handling practices.

Operational Excellence

• Build and manage a centralized Command Control Center for real-time monitoring of AI systems, infrastructure, and compliance metrics.
• Continuously improve security operations through automation, analytics, and threat intelligence integration.

Qualifications

• 10+ years in cybersecurity leadership, with 3+ years in AI/ML or data platform environments.
• Proven experience securing AI systems in healthcare, public sector, or retail domains.
• Deep understanding of cloud-native architectures (AWS, Azure, GCP), DevSecOps, and infrastructure-as-code.
• Strong knowledge of regulatory frameworks: HIPAA, GDPR, CCPA, NIST, FedRAMP, PCI-DSS.
• Certifications such as CISSP, CISM, CCSP, or emerging AI governance credentials are preferred.

Preferred Attributes

• Experience with AI-specific compliance frameworks and ethical AI principles.
• Familiarity with data marketplaces, synthetic data generation, and human-in-the-loop (HITL) systems.
• Ability to influence executive stakeholders and shape product security strategy in a fast-paced, innovation-driven environment.