Strategic CISO for Enterprise Cyber Resilience

Kleinfelder; San Diego (CA); On-site; USD 183,000 - 275,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k) plan

Paid holidays

Job summary

Kleinfelder is seeking a Chief Information Security Officer to lead the cybersecurity strategy and risk program. You will guide governance, architecture, and the secure delivery of technology-enabled services while partnering with Legal, Privacy, HR, and Operations across a complex, regulated environment.

The role requires extensive enterprise security leadership, DevSecOps sponsorship, and compliance with CMMC, NIST SP 800-171, and related frameworks. Competitive compensation reflects expertise.

Qualifications

• Bachelor's degree or equivalent in cybersecurity, computer science, information systems, engineering, business administration, risk management, or related field.
• 12+ years of progressive cybersecurity/technology risk experience with enterprise security leadership.
• Experience advising executive leadership or a Board on material cyber risk, incidents, and investment priorities.

Responsibilities

• Own and maintain a multi-year enterprise cybersecurity strategy, governance, and budget.
• Lead enterprise security governance and report to the Board on risk posture and program maturity.
• Oversee risk management, regulatory obligations, and supplier/federal contracting security obligations.
• Establish security architecture principles and DevSecOps practices across cloud and on-premise environments.
• Lead incident response, resilience, and crisis management with measurable risk indicators.

Skills

Executive leadership

Risk-based judgment

Strategic execution

Collaboration

Crisis leadership

Financial acumen

Education

Bachelor's degree

Master's degree preferred

Job description

Kleinfelder is seeking a Chief Information Security Officer to lead the cybersecurity strategy and risk program. You will guide governance, architecture, and the secure delivery of technology-enabled services while partnering with Legal, Privacy, HR, and Operations across a complex, regulated environment.

The role requires extensive enterprise security leadership, DevSecOps sponsorship, and compliance with CMMC, NIST SP 800-171, and related frameworks. Competitive compensation reflects expertise.