Chief Information Security Officer

Lewis Brisbois; Los Angeles (CA); On-site; USD 260,000 - 360,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401k with employer match

Paid time off

Job summary

Lewis Brisbois in Los Angeles seeks a strategic Chief Information Security Officer to lead enterprise cybersecurity, privacy, and risk management across the firm. You will design and implement a comprehensive security program aligned with regulatory standards and professional obligations.

The role requires a strong background in secure architecture for cloud, on‑premise, and hybrid environments, plus experience directing governance programs (NIST/ISO/SOC 2) and incident response.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• Master’s degree preferred.
• Certifications such as CISSP, CISM, CISA, CRISC or equivalent.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm or highly regulated industry preferred.

Responsibilities

• Develop and execute an enterprise-wide security strategy.
• Lead cybersecurity, data protection, and operational resilience programs.
• Establish governance frameworks aligned with best practices (NIST, ISO, SOC 2).
• Oversee threat detection, incident response, and digital forensics.
• Ensure secure architecture across cloud, on-premise, and hybrid environments.

Skills

Cybersecurity leadership

Risk management

Governance & compliance

Cloud security

Incident response

Education

Bachelor’s degree in Information Security or related field

Master’s degree preferred

CISSP

CISM

CISA

CRISC

Tools

NIST

ISO 27001

SOC 2

Job description

The Los Angeles, CA office of Lewis Brisbois, a full-service AmLaw 100 firm, is seeking a Chief Information Security Officer. The Chief Information Security Officer (CISO) is a senior executive responsible for developing, implementing, and overseeing a comprehensive, enterprise-wide security strategy to protect the firm’s clients, information, and reputation. The CISO leads all aspects of cybersecurity, privacy, and risk management in alignment with the firm’s strategic objectives and professional obligations.

We offer competitive compensation and in addition, Lewis Brisbois offers a range of benefits including medical, dental, vision, life insurance, 401k with employer match, as well as sick and vacation time. We also offer excellent opportunities for growth and advancement while working with a collaborative team.

The following list of functions is not exhaustive, and other duties may be assigned in addition to those listed. The items listed are considered daily functions associated with this position. The CISO will develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience, establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2) and lead the design, implementation, and continuous improvement of the firm’s information security program.

Protecting client confidentiality and attorney-client privilege through robust technical and procedural controls as well as overseeing threat detection, incident response, digital forensics, and vulnerability management are essential functions of this role. Well qualified candidates will have a background in ensuring secure architecture across cloud, on-premise, and hybrid environments and compliance with applicable data protection, privacy, and cybersecurity regulations (e.g., GDPR, CCPA, HIPAA requirements where applicable).

Candidates must have the following

• Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent preferred.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm, professional services firm, or highly regulated industry strongly preferred.