Chief Information Security Officer: Enterprise Security & Risk

Lewis Brisbois; San Diego (CA); On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Life insurance

401k with employer match

Sick leave

Vacation time

Career growth

Job summary

Lewis Brisbois, a full-service AmLaw 100 firm, seeks a Chief Information Security Officer to lead enterprise security across cybersecurity, privacy, and risk management with governance aligned to NIST, ISO and SOC 2.

The CISO will oversee incident response, digital forensics, and vulnerability management while ensuring secure cloud, on‑premise, and hybrid architectures and compliance with GDPR/CCPA/HIPAA where applicable.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field (Master’s preferred).
• Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent preferred.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm, professional services firm, or highly regulated industry strongly preferred.

Responsibilities

• Develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience.
• Establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2).
• Lead design, implementation, and continuous improvement of the firm’s information security program.
• Protect client confidentiality and attorney-client privilege through robust controls; oversee threat detection, incident response, digital forensics, and vulnerability management.
• Ensure secure architecture across cloud, on-premise, and hybrid environments; ensure compliance with data protection and privacy regulations (GDPR, CCPA, HIPAA where applicable).

Job description

Lewis Brisbois, a full-service AmLaw 100 firm, seeks a Chief Information Security Officer to lead enterprise security across cybersecurity, privacy, and risk management with governance aligned to NIST, ISO and SOC 2.

The CISO will oversee incident response, digital forensics, and vulnerability management while ensuring secure cloud, on‑premise, and hybrid architectures and compliance with GDPR/CCPA/HIPAA where applicable.