Position Description

We are seeking a hands-on Chief Information Security Officer (CISO) to lead and execute the company’s cybersecurity program in support of federal government contracts. This is a senior-level individual contributor role with no direct reports, responsible for enterprise-wide information security strategy, compliance, and risk management.

This position requires full-time, five-days-per-week onsite presence and is not eligible for remote or hybrid work.

Key Responsibilities

Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategy
Develop, implement, and maintain enterprise-wide security policies, standards, and controls
Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
Manage Authority to Operate (ATO) processes and interface with auditors and assessors
Conduct risk assessments, vulnerability analysis, and risk mitigation activities
Oversee incident response planning and execution
Review proposed system architectures to ensure "Security by Design
Guide secure architecture across network, cloud, and endpoint environments
Collaborate with program teams and support security requirements for proposals

Required Qualifications

Active TS/SCI clearance or ability to obtain
Bachelor’s degree or equivalent experience
10+ years of progressive cybersecurity experience
List of IT and Security certifications
List and provide experience in Monitoring and secure communications platforms-
Experience in a government contracting environment
Strong knowledge of NIST frameworks, RMF, and federal compliance requirements
Hands-on experience with network, cloud, and endpoint security
Ability to operate independently without direct reports
Excellent communication and stakeholder engagement skills

Preferred Qualifications

CISSP, CISM, or similar certification
Familiarity with classified environments and SCIF operations

#ZR

Learn more about this Employer on their Career Site