CISO, Enterprise Security & Privacy Leader

Lewis Brisbois; Los Angeles (CA); On-site; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401k with employer match

Sick and vacation time

Job summary

Lewis Brisbois—Los Angeles office is seeking a Chief Information Security Officer to guide the firm’s cybersecurity, privacy, and risk management strategy. You will lead a cross-functional team, align security with regulatory obligations, and oversee incident response and governance in a large professional-services environment.

The role requires extensive leadership experience, a security governance mindset, and a track record of building enterprise-wide security programs across cloud, on‑prem,

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• Certifications such as CISSP, CISM, CISA, CRISC preferred.
• 8+ years of cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience in a law firm, professional services firm, or regulated industry is strongly preferred.

Responsibilities

• Develop and execute a firm-wide security strategy covering cybersecurity, data protection, and operational resilience.
• Establish governance frameworks aligned with NIST, ISO, SOC 2 and lead security program design and improvement.
• Protect client confidentiality and attorney-client privilege with robust controls and incident handling.
• Oversee threat detection, incident response, digital forensics, and vulnerability management across environments.

Skills

Cybersecurity leadership

Governance & risk management

Incident response

Cloud & data security

Education

Bachelor’s degree in Information Security

Master’s preferred

Tools

CISSP

CISM

CISA

CRISC

Job description

Lewis Brisbois—Los Angeles office is seeking a Chief Information Security Officer to guide the firm’s cybersecurity, privacy, and risk management strategy. You will lead a cross-functional team, align security with regulatory obligations, and oversee incident response and governance in a large professional-services environment.

The role requires extensive leadership experience, a security governance mindset, and a track record of building enterprise-wide security programs across cloud, on‑prem,