Position Description
We are seeking a hands-on Chief Information Security Officer (CISO) to lead and execute the company’s cybersecurity program in support of federal government contracts. This is a senior-level individual contributor role with no direct reports, responsible for enterprise-wide information security strategy, compliance, and risk management.
This position requires full-time, five-days-per-week onsite presence and is not eligible for remote or hybrid work.
Key Responsibilities
- Serve as the organization’s senior authority on cybersecurity and advise executive leadership on risk and strategy
- Develop, implement, and maintain enterprise-wide security policies, standards, and controls
- Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
- Manage Authority to Operate (ATO) processes and interface with auditors and assessors
- Conduct risk assessments, vulnerability analysis, and risk mitigation activities
- Oversee incident response planning and execution
- Review proposed system architectures to ensure "Security by Design
- Guide secure architecture across network, cloud, and endpoint environments
- Collaborate with program teams and support security requirements for proposals
Required Qualifications
- Active TS/SCI clearance or ability to obtain
- Bachelor’s degree or equivalent experience
- 10+ years of progressive cybersecurity experience
- List of IT and Security certifications
- List and provide experience in Monitoring and secure communications platforms-
- Experience in a government contracting environment
- Strong knowledge of NIST frameworks, RMF, and federal compliance requirements
- Hands-on experience with network, cloud, and endpoint security
- Ability to operate independently without direct reports
- Excellent communication and stakeholder engagement skills
Preferred Qualifications
- CISSP, CISM, or similar certification
- Familiarity with classified environments and SCIF operations
#ZR