Head of Information Security

Centific

12h

About The Position

About Centific Centific is a frontier AI data foundry that curates diverse, high-quality data, using our purpose-built technology platforms to empower the Magnificent Seven and our enterprise clients with safe, scalable AI deployment. Our team includes more than 150 PhDs and data scientists, along with more than 4,000 AI practitioners and engineers. We harness the power of an integrated solution ecosystem—comprising industry-leading partnerships and 1.8 million vertical domain experts in more than 230 markets—to create contextual, multilingual, pre-trained datasets; fine-tuned, industry-specific LLMs; and RAG pipelines supported by vector databases. Our zero-distance innovation™ solutions for GenAI can reduce GenAI costs by up to 80% and bring solutions to market 50% faster. Our mission is to bridge the gap between AI creators and industry leaders by bringing best practices in GenAI to unicorn innovators and enterprise customers. We aim to help these organizations unlock significant business value by deploying GenAI at scale, helping to ensure they stay at the forefront of technological advancement and maintain a competitive edge in their respective markets. About Job Security Strategy & Architecture Define and execute a comprehensive security strategy aligned with business goals, product architecture, and sector-specific regulatory requirements. Lead the design and implementation of secure-by-design principles across AI pipelines, including RAG, RLHF, HITL, and red teaming modules. Governance & Risk Management Establish and maintain governance frameworks for AI model lifecycle management, including auditability, explainability, and safety scoring. Conduct regular risk assessments and threat modeling, particularly for AI-specific threats such as data poisoning and adversarial attacks. Incident Response & Resilience Develop and lead the enterprise-wide incident response program, including detection, containment, investigation, and recovery. Coordinate cross-functional response to security incidents and ensure continuous improvement through post-incident reviews and simulations. Compliance & Regulatory Alignment Ensure compliance with global and sector-specific regulations, including HIPAA, HITECH, GDPR, CCPA, PCI-DSS, FedRAMP, and the EU AI Act. Lead certification and audit readiness efforts (e.g., ISO 27001, SOC 2, HITRUST). Sector-Specific Security Oversight Healthcare: Secure PHI/PII in AI-driven diagnostics, imaging, and patient engagement systems. Public Sector: Align with NIST 800-53 and FedRAMP for civic AI deployments and law enforcement use cases. Retail: Protect customer data used in personalization, sentiment analysis, and recommendation engines. Security Awareness & Culture Champion a security-first culture through training, awareness campaigns, and executive engagement. Develop role-based security education programs tailored to engineering, product, and business teams. Customer & Partner Trust Serve as the executive voice on security in customer engagements, RFPs, and co-sell partnerships. Lead responses to customer security questionnaires and ensure transparency in data handling practices. Operational Excellence Build and manage a centralized Command Control Center for real-time monitoring of AI systems, infrastructure, and compliance metrics. Continuously improve security operations through automation, analytics, and threat intelligence integration. Centific is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, ancestry, citizenship status, age, mental or physical disability, medical condition, sex (including pregnancy), gender identity or expression, sexual orientation, marital status, familial status, veteran status, or any other characteristic protected by applicable law. We consider qualified applicants regardless of criminal histories, consistent with legal requirements. Join a growing company using technology to help tackle enterprises’ toughest challenges.

Responsibilities

Define and execute a comprehensive security strategy aligned with business goals, product architecture, and sector-specific regulatory requirements.
Lead the design and implementation of secure-by-design principles across AI pipelines, including RAG, RLHF, HITL, and red teaming modules.
Establish and maintain governance frameworks for AI model lifecycle management, including auditability, explainability, and safety scoring.
Conduct regular risk assessments and threat modeling, particularly for AI-specific threats such as data poisoning and adversarial attacks.
Develop and lead the enterprise-wide incident response program, including detection, containment, investigation, and recovery.
Coordinate cross-functional response to security incidents and ensure continuous improvement through post-incident reviews and simulations.
Ensure compliance with global and sector-specific regulations, including HIPAA, HITECH, GDPR, CCPA, PCI-DSS, FedRAMP, and the EU AI Act.
Lead certification and audit readiness efforts (e.g., ISO 27001, SOC 2, HITRUST).
Secure PHI/PII in AI-driven diagnostics, imaging, and patient engagement systems.
Align with NIST 800-53 and FedRAMP for civic AI deployments and law enforcement use cases.
Protect customer data used in personalization, sentiment analysis, and recommendation engines.
Champion a security-first culture through training, awareness campaigns, and executive engagement.
Develop role-based security education programs tailored to engineering, product, and business teams.
Serve as the executive voice on security in customer engagements, RFPs, and co-sell partnerships.
Lead responses to customer security questionnaires and ensure transparency in data handling practices.
Build and manage a centralized Command Control Center for real-time monitoring of AI systems, infrastructure, and compliance metrics.
Continuously improve security operations through automation, analytics, and threat intelligence integration.