Director, Information Security

## About Us Centric Brands is a leading lifestyle brand collective that designs, sources, markets and sells high quality products in multiple segments, including women’s, men’s and kid’s apparel, accessories, entertainment and beauty. Centric Brands is focused on our customers and our brands that will drive the company’s future growth. We are defined by innovation as we seize new opportunities and thrive in an environment informed by creativity and thinking that is both analytical and outside the box. Centric Brands reflects a team built on respect, for others and for the hard work it takes to achieve our goals and build our bright future together. ## Specific Responsibilities Would Include **Position Overview** The Director of Information Security is responsible for developing and executing Centric Brands' enterprise cybersecurity strategy, protecting company information assets, and reducing cyber risk across the global business. This role leads security operations, governance, compliance, incident response, and emerging technology security programs while partnering with business and technology leaders to enable secure growth. This position will be based in Greensboro, NC. It will follow a hybrid work schedule of Monday-Thursday in office with Friday being a remote work day. This schedule is subject to change based on business needs.**Responsibilities** **Strategy, Governance, and Executive Leadership** • Provide strategic leadership for, and develop, implement, and operate, a company-wide information security program. • Advise senior leadership on security program direction and resource investment. • Develop and manage the information security budget, aligning investments with risk priorities. • Report regularly to executive leadership on security posture, risk reduction, incident readiness, and program maturity against defined KPIs. • Manage and facilitate global information security governance processes. • Establish annual and long-range security and compliance goals, define security strategies, metrics, reporting mechanisms and program services; and create maturity models and a roadmap for continual program improvements. • Stay abreast of information security issues and regulatory changes affecting consumer goods, retail and trade at the state, national and global levels, participate in policy and practice discussions, and communicate to leadership on a regular basis about those topics. • Engage in professional development to maintain continual growth in professional skills and knowledge essential to the position. **Team Leadership** • Mentor/Coach the Information Security Office team members and implement professional development plans for team members. Communicate clear goals and objectives. • Partner with infrastructure, network, cloud, application, and end-user computing teams to implement and maintain enterprise security standards and controls. Policy, Compliance, and Audit • Lead the development and implementation of effective and reasonable policies and practices to secure protected and sensitive data and ensure information security and compliance with relevant legislation and legal interpretation. • Coordinate and track all information technology and security related audits including scope of audits, timelines, auditing agencies and outcomes. Work with auditors as appropriate to keep audit focus in scope, maintain excellent relationships with audit entities and provide a consistent perspective that continually puts the company in its best light. • Provide guidance, evaluation and advocacy on audit responses. • Work with leadership and relevant responsible compliance department leadership to build cohesive security and compliance programs for the company to effectively address global statutory and regulatory requirements. • Develop a strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors, PCI, CCPA, and GDPR. • Support Legal Discove…