Chief Information Security Officer

Lewis-Brisbois; Chicago (IL); Hybrid; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) with employer match

Paid time off

Job summary

Lewis Brisbois, based in Chicago, seeks a Chief Information Security Officer to lead cybersecurity, privacy, and risk management across the firm. The CISO will craft enterprise-wide security strategy, govern with NIST/ISO/SOC 2, and oversee the security program end-to-end.

The role requires 8+ years in cyber, 6+ years in senior leadership, and prior experience in professional services or regulated industries. Hybrid work model with strong growth opportunities is offered.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
• Certifications such as CISSP, CISM, CISA, CRISC or equivalent preferred.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm, professional services firm, or highly regulated industry strongly preferred.

Responsibilities

• Develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience.
• Establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2).
• Lead the design, implementation, and continuous improvement of the firm’s information security program.
• Protect client confidentiality and attorney-client privilege through robust controls; oversee threat detection, incident response, forensics, and vulnerability management.
• Ensure secure architecture across cloud, on-premise, and hybrid environments and compliance with GDPR, CCPA, HIPAA where applicable.

Skills

Cybersecurity Leadership

Risk Management

Data Protection

Regulatory Compliance

Cloud/Security Architecture

Education

Bachelor's degree in Information Security, Computer Science, or related field

Master's degree preferred

Tools

CISSP

CISM

CISA

CRISC

Job description

Overview

The Chicago, IL office of Lewis Brisbois, a full-service AmLaw 100 firm, is seeking a Chief Information Security Officer. The Chief Information Security Officer (CISO) is a senior executive responsible for developing, implementing, and overseeing a comprehensive, enterprise-wide security strategy to protect the firm’s clients, information, and reputation. The CISO leads all aspects of cybersecurity, privacy, and risk management in alignment with the firm’s strategic objectives and professional obligations.

We offer competitive compensation and in addition, Lewis Brisbois offers a range of benefits including medical, dental, vision, life insurance, 401k with employer match, as well as sick and vacation time. We also offer excellent opportunities for growth and advancement while working with a collaborative team.

Responsibilities

The following list of functions is not exhaustive, and other duties may be assigned in addition to those listed. The items listed are considered daily functions associated with this position. The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2) and lead the design, implementation, and continuous improvement of the firm’s information security program.

Protecting client confidentiality and attorney-client privilege through robust technical and procedural controls as well as overseeing threat detection, incident response, digital forensics, and vulnerability management are essential functions of this role. Well qualified candidates will have a background in ensuring secure architecture across cloud, on-premise, and hybrid environments and compliance with applicable data protection, privacy, and cybersecurity regulations (e.g., GDPR, CCPA, HIPAA requirements where applicable).

Candidates must have the following:

• Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent preferred.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm, professional services firm, or highly regulated industry strongly preferred.

Lewis Brisbois is not accepting search firm submissions for this position.

#LI-HYBRID

#LI-AR1

Minimum Salary

USD $250,000.00/Yr.

Maximum Salary

USD $350,000.00/Yr.