CISO - Enterprise Security & Risk Strategy (Hybrid)

Lewis-Brisbois; San Francisco (CA); Hybrid; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401k with employer match

Paid time off

Job summary

Lewis Brisbois in San Francisco seeks a Chief Information Security Officer to lead enterprise-wide security strategy, data protection, and risk management across all departments.

You will oversee cybersecurity, privacy, governance, and incident response, aligning with NIST, ISO, and SOC 2 standards.

The role requires 8+ years in cybersecurity with 6+ years in senior leadership; prior law firm or regulated industry experience preferred.

Qualifications

• 8+ years in cybersecurity or enterprise risk management.
• 6+ years in a senior leadership role managing global security programs.
• Experience in a law firm, professional services firm, or regulated industry preferred.

Responsibilities

• Develop and execute a firm-wide security strategy covering cybersecurity, data protection, and operational resilience.
• Establish governance frameworks aligned with NIST, ISO, SOC 2.
• Lead design, implementation, and continuous improvement of the information security program.
• Protect client confidentiality and privilege with robust controls and incident response.
• Oversee threat detection, incident response, forensics, and vulnerability management.

Skills

Leadership & executive presence

Security architecture

Risk management

Threat detection & incident response

Education

Bachelor's degree in Information Security, Computer Science, or related field

Master’s degree preferred

CISSP

CISM

CISA

CRISC

Job description

Lewis Brisbois in San Francisco seeks a Chief Information Security Officer to lead enterprise-wide security strategy, data protection, and risk management across all departments.

You will oversee cybersecurity, privacy, governance, and incident response, aligning with NIST, ISO, and SOC 2 standards.

The role requires 8+ years in cybersecurity with 6+ years in senior leadership; prior law firm or regulated industry experience preferred.