Strategic CISO: Enterprise Security & Risk Leadership

Lewis-Brisbois; Washington (District of Columbia); Hybrid; USD 250,000 - 350,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with employer match

Sick and vacation time

Job summary

Lewis Brisbois, Washington, D.C. office, seeks a Chief Information Security Officer to lead enterprise security, privacy, and risk management. You will shape a firm-wide strategy, oversee threat detection, incident response, and governance aligned with NIST, ISO, and SOC 2.

A JD from a law firm or regulated industry is preferred, with a strong leadership background. The role requires cloud, on-prem, and hybrid security expertise, with advanced degrees and relevant certifications.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• CISSP, CISM, CISA, CRISC or equivalent preferred.
• 8+ years in cybersecurity or enterprise risk management.
• 6+ years in a senior leadership role leading global security programs.
• Experience in a law firm, professional services firm, or highly regulated industry preferred.

Responsibilities

• Develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience.
• Establish governance frameworks aligned with industry best practices (NIST, ISO, SOC 2).
• Lead design, implementation, and continuous improvement of the information security program.
• Protect client confidentiality and attorney-client privilege with robust controls.
• Oversee threat detection, incident response, digital forensics, and vulnerability management.
• Ensure secure architecture across cloud, on-premise, and hybrid environments and regulatory compliance.

Skills

Cybersecurity leadership

Security governance

Threat management

Regulatory compliance

Education

Bachelor's degree in Information Security or Computer Science

Master's degree preferred

Certifications (CISSP/CISM/CISA/CRISC) preferred

Tools

CISSP

CISM

CISA

CRISC

Job description

Lewis Brisbois, Washington, D.C. office, seeks a Chief Information Security Officer to lead enterprise security, privacy, and risk management. You will shape a firm-wide strategy, oversee threat detection, incident response, and governance aligned with NIST, ISO, and SOC 2.

A JD from a law firm or regulated industry is preferred, with a strong leadership background. The role requires cloud, on-prem, and hybrid security expertise, with advanced degrees and relevant certifications.