CISO — Enterprise Security & Privacy Strategy

Lewis Brisbois; Los Angeles (CA); On-site; USD 260,000 - 360,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401k with employer match

Paid time off

Job summary

Lewis Brisbois in Los Angeles seeks a strategic Chief Information Security Officer to lead enterprise cybersecurity, privacy, and risk management across the firm. You will design and implement a comprehensive security program aligned with regulatory standards and professional obligations.

The role requires a strong background in secure architecture for cloud, on‑premise, and hybrid environments, plus experience directing governance programs (NIST/ISO/SOC 2) and incident response.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• Master’s degree preferred.
• Certifications such as CISSP, CISM, CISA, CRISC or equivalent.
• 8+ years of experience in cybersecurity, information security, or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience within a law firm or highly regulated industry preferred.

Responsibilities

• Develop and execute an enterprise-wide security strategy.
• Lead cybersecurity, data protection, and operational resilience programs.
• Establish governance frameworks aligned with best practices (NIST, ISO, SOC 2).
• Oversee threat detection, incident response, and digital forensics.
• Ensure secure architecture across cloud, on-premise, and hybrid environments.

Skills

Cybersecurity leadership

Risk management

Governance & compliance

Cloud security

Incident response

Education

Bachelor’s degree in Information Security or related field

Master’s degree preferred

CISSP

CISM

CISA

CRISC

Tools

NIST

ISO 27001

SOC 2

Job description

Lewis Brisbois in Los Angeles seeks a strategic Chief Information Security Officer to lead enterprise cybersecurity, privacy, and risk management across the firm. You will design and implement a comprehensive security program aligned with regulatory standards and professional obligations.

The role requires a strong background in secure architecture for cloud, on‑premise, and hybrid environments, plus experience directing governance programs (NIST/ISO/SOC 2) and incident response.