{"id":1386730,"url":"https://alion.io/job/centric-brands-director-information-security","title":"Director, Information Security","company":{"id":1982544,"name":"Centric Brands","domain":"centricbrands.com","url":"https://alion.io/company/centricbrands","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Greensboro, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":231000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":2192},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"FortiGate","optional":false},{"name":"GDPR","optional":false},{"name":"Machine Learning","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-28T10:23:53Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-14T14:17:55Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"About Us\nCentric Brands is a leading lifestyle brand collective that designs, sources, markets and sells high quality products in multiple segments, including women’s, men’s and kid’s apparel, accessories, entertainment and beauty. Centric Brands is focused on our customers and our brands that will drive the company’s future growth. We are defined by innovation as we seize new opportunities and thrive in an environment informed by creativity and thinking that is both analytical and outside the box. Centric Brands reflects a team built on respect, for others and for the hard work it takes to achieve our goals and build our bright future together.\nSpecific Responsibilities Would Include\nPosition Overview The Director of Information Security is responsible for developing and executing Centric Brands' enterprise cybersecurity strategy, protecting company information assets, and reducing cyber risk across the global business. This role leads security operations, governance, compliance, incident response, and emerging technology security programs while partnering with business and technology leaders to enable secure growth. This position will be based in Greensboro, NC. It will follow a hybrid work schedule of Monday-Thursday in office with Friday being a remote work day. This schedule is subject to change based on business needs.Responsibilities\nStrategy, Governance, and Executive Leadership\nProvide strategic leadership for, and develop, implement, and operate, a company-wide information security program.\nAdvise senior leadership on security program direction and resource investment.\nDevelop and manage the information security budget, aligning investments with risk priorities.\nReport regularly to executive leadership on security posture, risk reduction, incident readiness, and program maturity against defined KPIs.\nManage and facilitate global information security governance processes.\nEstablish annual and long-range security and compliance goals, define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements.\nStay abreast of information security issues and regulatory changes affecting consumer goods, retail and trade at the state, national and global levels, participate in policy and practice discussions, and communicate to leadership on a regular basis about those topics.\nEngage in professional development to maintain continual growth in professional skills and knowledge essential to the position.\nTeam Leadership\nMentor/Coach the Information Security Office team members and implement professional development plans for team members. Communicate clear goals and objectives.\nPartner with infrastructure, network, cloud, application, and end-user computing teams to implement and maintain enterprise security standards and controls.\nPolicy, Compliance, and Audit\nLead the development and implementation of effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation.\nCoordinate and track all information technology and security related audits including scope of audits, timelines, auditing agencies and outcomes. Work with auditors as appropriate to keep audit focus in scope, maintain excellent relationships with audit entities and provide a consistent perspective that continually puts the company in its best light.\nProvide guidance, evaluation and advocacy on audit responses.\nWork with leadership and relevant responsible compliance department leadership to build cohesive security and compliance programs for the company to effectively address global statutory and regulatory requirements.\nDevelop a strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors, PCI, CCPA, and GDPR.\nSupport Legal Discovery requests when required.\nSecurity Awareness and Training\nWork closely with IT leaders, technical experts and various leaders on a wide variety of security issues that require an in-depth understanding of the IT environment in their units.\nCreate education and awareness programs and advise operating units at all levels on security issues, best practices, and vulnerabilities.\nPursue employee-focused security initiatives addressing phishing, social engineering, and identity protection.\nIncident Response and Resilience\nKeep abreast of security incidents and act as primary control point during significant information security incidents. Convene a Security Incident Response Team (SIRT) as needed, or requested, in addressing and investigating security incidents that arise.\nOwn and maintain the company’s incident response plan, including playbooks and regular tabletop exercises with business stakeholders.\nConvene Ad Hoc Security Committee as appropriate and provide leadership for breach response and notification actions for the company.\nPartner with IT and business leaders to develop and test business continuity, disaster recovery, and cyber resilience plans.\nRisk Management and Third-Party Risk\nEstablish and oversee a third-party risk management program, including security assessments of vendors, licensing partners, and key service providers.\nProvide leadership, direction and guidance in assessing and evaluating information security risks and monitor compliance with security standards and appropriate policies.\nSupport cyber insurance renewals, security questionnaires, and claims coordination.\nSecurity Operations and Engineering\nDevelop, implement and administer technical security standards, as well as a suite of security services and tools to address and mitigate security risk.\nEstablish and oversee a vulnerability management program, including scanning, penetration testing, and remediation tracking.\nOversee day-to-day security operations, including MDR/SOC partner management, security monitoring and detection, threat intelligence, and endpoint and email security.\nSet direction for cloud security posture and zero-trust architecture in partnership with infrastructure and application teams.\nEstablish governance for identity and access management, including privileged access controls and periodic access reviews.\nExamine impacts of new technologies on the company’s overall information security. Establish processes to review implementation of new technologies to ensure security compliance.\nEstablish governance, risk management, and security standards for artificial intelligence (AI), generative AI, machine learning, and automation technologies. Partner with business and technology leaders to enable responsible and secure adoption of AI solutions across the enterprise.\nOur Best Fit Candidate Would Have\nSkills and Requirements\nBachelor’s degree in Information Systems, Computer Science, or related field required.\nCISSP, CISM, or equivalent security certification strongly preferred.\nMinimum of 10 years’ experience in information security, including 5+ years leading security teams or programs.\nExperience presenting security posture, risk, and program metrics to executive leadership.\nExperience leading global security programs; retail, consumer goods, or manufacturing industry experience a plus.\nExcellent communication skills - both written and verbal.\nExceptional, hands-on leader with a style that is engaging, innovative, and collaborative.\nAbility to be flexible, work under pressure and tight deadlines.\nAbility to travel as needed; once per quarter.\nAbility and availability to work occasional nights and weekends.\nExperience with Fortinet/FortiGate/Forticlient, Crowdstrike MDR/EDR, BitLocker, File Vault, MS Defender, and Azure Security services is a plus.\nIn return, we provide an industry-competitive salary, along with a comprehensive benefits plan (medical, dental, vision) that includes a matching 401(k), Summer Fridays, generous PTO, merchandise discounts, excellent career development opportunities, and a work environment that reflects our industry leadership. Our social impact program, Centric Cares, focuses on volunteerism to make a difference in communities we live and work in and our D&I committee is shaping the future of diversity, equity and inclusion at Centric Brands though workshops, resources and inspiring conversation.\nAt Centric Brands, we believe our people are our greatest asset, and we seek to structure competitive compensation offers to ensure that we are able to attract and retain the best talent. Our job postings include an annual base salary range at the time of employment. The stated base salary range represents our good faith estimate as to what candidates are likely to expect, and we tailor our offers within the range based on several factors, including the selected candidate's educational and professional experience, industry knowledge, location, technical and communication skills, and other factors that may prove relevant during the selection process. Base salary is a part of a total compensation package, which, depending on the position, may also include commission earnings, annual bonus and other Centric Brands sponsored benefit programs.\nBe part of our growing community by getting involved with groups, teams and initiatives like Be Green, Be Giving, and Be Celebrated.\nCentric Brands is an Equal Opportunity Employer\nPlease note that Centric Brands will only reach out to interview, make an offer of employment or conduct onboarding activities for candidates who have applied through our careers site. When interviewing for a position, the candidate experience will include live interaction, such as a video conference or telephone call, with a Recruiter and/or company employee(s). We will never ask for any money or payments from applicants at any point in the recruitment process. Be aware of suspicious recruitment activity. If you think you are a victim of an employment scam, you may contact your local law enforcement agency and/or visit the Federal Trade Commission website here: https://consumer.ftc.gov/articles/job-scams.","description_format":"text","description_chars":10091,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":5,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Consumer Goods","Jewelry","Luxury Retail"],"lifecycle":[{"event":"open","at":"2026-09-28T10:23:53Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 1","filings_12m":8,"filings_prev_12m":6,"green_card_filings_12m":1,"median_offered_wage_usd":88611,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.427,"p_room":0.35,"age_days":15,"expected_fill_days":4,"reasons":["conf:0","velocity","win:tail"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/centric-brands-director-information-security","json_url":"https://alion.io/job/centric-brands-director-information-security.json","meta":{"generated_at":"2026-10-14T15:11:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19097,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1982544},"rest":"https://alion.io/mcp/rest/get_company?id=1982544"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcentric-brands-director-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcentric-brands-director-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcentric-brands-director-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/centric-brands-director-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcentric-brands-director-information-security"}]}