CentiMark Corporation is hiring a Lead Cybersecurity Specialist in our Canonsburg headquarters in SouthPointe! This is a full in-office role with an established company that is both family-founded and 100% employee-owned through our Employee Stock Ownership Program (ESOP). The Lead Cybersecurity Specialist is an operational, hands-on position that will own, mature, and defend our enterprise cybersecurity environment. Reporting directly to the CIO, you will translate contractual and regulatory security requirements into day-to-day administrative policies and direct our external Managed Security Services Provider (MSSP). This role is responsible for maturing our current CIS Controls baseline toward NIST CSF, NIST SP 800-171, and customer-mandated CMMC requirements. You will also take active ownership of enterprise-grade Data Loss Prevention (DLP) across Google Workspace, SAP, and Salesforce, while establishing real-world security guardrails for our enterprise AI adoption (Google Gemini). Key Responsibilities Security Maturity, Framework Alignment & Roadmapping: • Execute and mature the multi-year IT Cybersecurity Roadmap under the direction of the CIO • Advance our defensive posture from our current CIS Critical Security Controls (v8) baseline to satisfy customer-driven NIST CSF, NIST SP 800-171, and CMMC Level 2 compliance requirements • Translate contractual and regulatory security requirements into day-to-day administrative policies, identity controls, and operational runbooks • Maintain an auditable repository of security policies, evidence artifacts, and compliance documentation Data Loss Prevention (DLP) & AI Security Governance: • Design, implement, tune, and monitor enterprise DLP policies across core business platforms: Google Workspace (Drive, Gmail), Salesforce CRM, and SAP ERP • Classify sensitive commercial, financial, and customer data; establish strict egress boundaries and access controls to prevent data exfiltration • Build operational governance, prompt hygiene standards, and data perimeter rules for enterprise generative AI tooling (Google Gemini) • Partner with sales operations and customer service leaders to ensure data protection controls support high-speed commercial workflows "Working Manager" Operations & MSSP Oversight: • Direct our 24/7/365 external Managed Security Services Provider (MSSP / MDR), holding them accountable to SLAs, threat detection fidelity, and alert escalation protocols • Directly manage, configure, and audit core security tools: Endpoint Detection and Response (EDR), Identity and Access Management (IAM/SSO/MFA), email hygiene filters, and vulnerability management scanners • Serve as the primary internal technical escalation point for security events, anomalous behavior investigations, and triage Cyber Assurance: Pen Tests & Incident Response: • Scope, coordinate, and oversee annual third-party external/internal penetration tests; track vulnerability remediation through completion with infrastructure teams • Design, coordinate, and lead annual tabletop exercises (TTX) for cybersecurity incidents, testing response readiness across IT, Operations, Legal, and Executive leadership • Maintain and update the Incident Response Plan (IRP), Disaster Recovery (DR) alignments, and business continuity runbooks Customer Trust & Commercial Enablement: • Serve as the primary security subject matter expert reviewing customer security questionnaires, RFPs, and Master Services Agreement (MSA) security addendums • Participate in customer security audits and vendor risk management reviews to accelerate enterprise sales cycles • Design and execute role-tailored Security Awareness Training programs and ongoing phishing simulations Candidate Qualifications & Requirements Experience & Mindset: • 6–8+ years of progressive hands-on information security experience, including at least 2+ years in a technical lead, supervisory, or management role • True Working Manager Philosophy: Demonstrated track record of rolling up your sleeves to write policies, review logs, and configure security tools while also coordinating vendor contracts • Framework Translation: Practical experience implementing or maturing security frameworks from CIS Controls to NIST CSF / SP 800-171 or preparing an environment for CMMC • MSSP Leadership: Experience holding third-party managed detection and SOC providers accountable for alert triage, false-positive reduction, and threat hunting • Full-Time On-Site Dedication: Ability to work on-site five days a week at our Canonsburg, PA headquarters, driving hands-on collaboration with executive and cross-functional teams Technical Proficiencies: • Core Systems: Hands-on administrative and security configuration experience within Google Workspace Enterprise, Salesforce, and SAP • Data Protection: Direct experience engineering, deploying, and tuning Data Loss Prevention (DLP) and data classification solutions • AI Readiness: Solid understanding of generative AI risks (data leakage, prompt security, access controls) and administrative boundaries in Google Gemini or equivalent tools • Threat & Incident Management: Practical experience coordinating penetration test remediation, conducting tabletop exercises, and triaging security incidents Certifications & Education: • Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or equivalent practical experience • Active professional certification strongly preferred: CISSP, CISM, or GIAC certifications (GSLC, GCCC, GDSA) • Exposure to or certification in CMMC (such as CCP) is a strong plus. Premier Benefits • 2 Health Insurance Plans: • No Cost “Core Plan” – No Cost Medical & Dental • “Buy Up Plan” – Features a lower deductible for Medical • Vision Plan • Employer Paid Life & AD&D Insurance • Traditional 401K with Company Match • Roth 401K with Company Match • Flexible Spending Account (FSA) • Employer Provided Employee Stock Ownership Program (ESOP) • Paid Holidays and Vacation • Off-street parking • Onsite gym WHY WORK FOR CENTIMARK? >>>> CLICK HERE TO WATCH VIDEO! CentiMark provides a great work environment with challenging career opportunities. Drug Free Workplace - EOE (M/F/V/D) - E-Verify Employer For more information, please visit our website -- www.CentiMark.com/jobs