Lead Cybersecurity Specialist

CentiMark Corporation•Canonsburg, PA

22d•Onsite

About The Position

CentiMark Corporation is hiring a Lead Cybersecurity Specialist for its Canonsburg headquarters in SouthPointe. This is a hands-on, full in-office role responsible for owning, maturing, and defending the enterprise cybersecurity environment. Reporting directly to the CIO, the specialist translates contractual and regulatory security requirements into administrative policies and operational practices, and directs the company’s external Managed Security Services Provider (MSSP). The role advances the current CIS Controls baseline toward NIST CSF, NIST SP 800-171, and customer-mandated CMMC requirements. It also owns enterprise Data Loss Prevention (DLP) across Google Workspace, SAP, and Salesforce, and establishes security governance and data boundaries for enterprise AI use, including Google Gemini. The successful candidate will combine technical implementation and operational oversight: managing security tools and incident escalation, coordinating testing and response exercises, maintaining compliance evidence and response plans, and supporting customer security reviews and commercial activities. The position requires working onsite five days a week at the Canonsburg, PA headquarters.

Requirements

6–8+ years of progressive hands-on information security experience.
At least 2+ years in a technical lead, supervisory, or management role.
Demonstrated ability to perform hands-on security work, including writing policies, reviewing logs, and configuring security tools, while coordinating vendor contracts.
Practical experience implementing or maturing security frameworks from CIS Controls toward NIST CSF or NIST SP 800-171, or preparing an environment for CMMC.
Experience overseeing managed detection and SOC providers, including alert triage, false-positive reduction, and threat hunting.
Ability to work onsite five days a week at the Canonsburg, PA headquarters.
Hands-on administrative and security configuration experience with Google Workspace Enterprise, Salesforce, and SAP.
Direct experience engineering, deploying, and tuning DLP and data classification solutions.
Understanding of generative AI risks, including data leakage, prompt security, access controls, and administrative boundaries in Google Gemini or equivalent tools.
Practical experience coordinating penetration test remediation, conducting tabletop exercises, and triaging security incidents.
Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or equivalent practical experience.

Nice To Haves

Active professional certification strongly preferred, such as CISSP, CISM, or a GIAC certification (GSLC, GCCC, or GDSA).
Exposure to or certification in CMMC, such as CCP, is a strong plus.

Responsibilities

Execute and mature the multi-year IT Cybersecurity Roadmap under the CIO’s direction.
Advance the defensive posture from the CIS Critical Security Controls v8 baseline toward NIST CSF, NIST SP 800-171, and CMMC Level 2 requirements.
Translate contractual and regulatory security requirements into administrative policies, identity controls, and operational runbooks.
Maintain an auditable repository of security policies, evidence artifacts, and compliance documentation.
Design, implement, tune, and monitor DLP policies across Google Workspace (Drive and Gmail), Salesforce CRM, and SAP ERP.
Classify sensitive commercial, financial, and customer data, and establish egress boundaries and access controls to prevent data exfiltration.
Develop operational governance, prompt hygiene standards, and data perimeter rules for Google Gemini and other enterprise generative AI tooling.
Partner with sales operations and customer service leaders so data protection controls support commercial workflows.
Direct the 24/7/365 external MSSP/MDR provider and hold it accountable for SLAs, threat detection fidelity, and alert escalation protocols.
Manage, configure, and audit EDR, IAM/SSO/MFA, email hygiene filters, and vulnerability management scanners.
Serve as the primary internal technical escalation point for security events, anomalous behavior investigations, and triage.
Scope, coordinate, and oversee annual third-party external and internal penetration tests, and track vulnerability remediation through completion with infrastructure teams.
Design, coordinate, and lead annual cybersecurity incident tabletop exercises across IT, Operations, Legal, and executive leadership.
Maintain and update the Incident Response Plan, Disaster Recovery alignments, and business continuity runbooks.
Review customer security questionnaires, RFPs, and Master Services Agreement security addendums as the primary security subject matter expert.
Participate in customer security audits and vendor risk management reviews.
Design and deliver role-tailored security awareness training and ongoing phishing simulations.

Benefits

Two health insurance plans: a no-cost Core Plan with no-cost medical and dental coverage, and a Buy Up Plan with a lower medical deductible.
Vision plan.
Employer-paid life and AD&D insurance.
Traditional 401(k) with company match.
Roth 401(k) with company match.
Flexible Spending Account (FSA).
Employer-provided Employee Stock Ownership Program (ESOP).
Paid holidays and vacation.
Off-street parking.
Onsite gym.