Chief Information Security Officer

Lewis Brisbois; Chicago (IL); On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) with employer match

Sick leave

Vacation

Job summary

Lewis Brisbois, the Chicago office, seeks a Chief Information Security Officer to lead cybersecurity, privacy, and risk management, overseeing enterprise‑wide security strategy and controls to protect clients and the firm. The CISO will drive governance with NIST/ISO/SOC 2, and manage security programs across cloud, on‑premise, and hybrid environments.

Minimum qualifications include a bachelor’s in information security or related field, professional certifications (CISSP/CISM/CISA/CRISC), 8+

Qualifications

• Bachelor’s degree in Information Security, CS, or related field (Master’s preferred).
• Certifications such as CISSP, CISM, CISA, CRISC or equivalent preferred.
• 8+ years of experience in cybersecurity or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience in a law firm, professional services, or highly regulated industry preferred.

Responsibilities

• Develop and execute a firm-wide security strategy covering cyber, data protection, and operations.
• Establish governance aligned with NIST, ISO, SOC 2; lead security program design and improvement.
• Protect client confidentiality and privilege; oversee threat detection, incident response, and forensics.
• Ensure secure architecture across cloud, on‑premise, and hybrid environments; ensure compliance.

Skills

Leadership

Strategic planning

Communication

Risk management

Cloud security

Incident response

Education

Bachelor’s degree in Information Security or related field

Master’s degree preferred

CISSP

CISM

CISA

CRISC

Job description

The Chicago, IL office of Lewis Brisbois, a full-service AmLaw 100 firm, is seeking a Chief Information Security Officer. The Chief Information Security Officer (CISO) is a senior executive responsible for developing, implementing, and overseeing a comprehensive, enterprise-wide security strategy to protect the firm’s clients, information, and reputation. The CISO leads all aspects of cybersecurity, privacy, and risk management in alignment with the firm’s strategic objectives and professional obligations.

We offer competitive compensation and in addition, Lewis Brisbois offers a range of benefits including medical, dental, vision, life insurance, 401k with employer match, as well as sick and vacation time. We also offer excellent opportunities for growth and advancement while working with a collaborative team.

Responsibilities

The following list of functions is not exhaustive, and other duties may be assigned in addition to those listed. The items listed are considered daily functions associated with this position. The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2) and lead the design, implementation, and continuous improvement of the firm’s information security program.

Protecting client confidentiality and attorney-client privilege through robust technical and procedural controls as well as overseeing threat detection, incident response, digital forensics, and vulnerability management are essential functions of this role. Well qualified candidates will have a background in ensuring secure architecture across cloud, on-premise, and hybrid environments and compliance with applicable data protection, privacy, and cybersecurity regulations (e.g., GDPR, CCPA, HIPAA requirements where applicable).

Candidates must have the following:

• Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent preferred.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm, professional services firm, or highly regulated industry strongly preferred.

Lewis Brisbois is not accepting search firm submissions for this position.

Minimum Salary
USD $250,000.00/Yr.

Maximum Salary
USD $350,000.00/Yr.