Chief Information Security Officer, Director

LMI - Tysons, VA

Full-time - Senior

Tysons, VA

Professional, Scientific, and Technical Services

About the position

The Chief Information Security Officer (CISO) at LMI is responsible for securing the organization's information systems and managing cybersecurity risks while ensuring compliance with government regulations. This role involves developing and implementing cybersecurity strategies, establishing governance frameworks, and regularly briefing executive leadership on security posture and emerging threats. The CISO will work closely with various stakeholders to implement practices that align with organizational goals and government security requirements.

Responsibilities

• Develops and implements cybersecurity strategies that align with LMI's goals and government security requirements.
• Establishes governance frameworks including policies, procedures, and governance structures for consistent cybersecurity management.
• Regularly briefs executive leadership on the security posture, plans, and emerging threats.
• Ensures compliance with federal regulations and standards such as ISO 2700X, NIST SP 800-53, and CMMC.
• Prepares the organization for audits and certifications related to government cybersecurity compliance.
• Identifies and manages cybersecurity risks, including third-party risks and insider threats.
• Implements robust access controls, encryption standards, and technical security measures on sensitive information.
• Manages security operations and oversees security operations centers (SOCs) for continuous monitoring and incident response.
• Collaborates with government entities for security audits and timely incident reporting.
• Implements cybersecurity awareness and training programs across the organization.
• Manages third-party and supply chain security to ensure compliance with cybersecurity requirements.
• Develops, tests, and communicates business continuity and disaster recovery plans.
• Allocates and manages the budget for cybersecurity initiatives and staff.
• Manages a cost-efficient information security organization, including hiring and performance management.

Requirements

• Demonstrated experience in leadership roles in information security and risk management.
• Knowledge of information security management frameworks such as ISO/IEC 27001 and NIST.
• Experience leading support and response to external security audits.
• Degree in a STEM field or equivalent experience.
• 10+ years of experience in cybersecurity or information security roles.
• Experience designing and implementing cybersecurity architectures and securing cloud environments.
• Familiarity with firewalls, intrusion detection systems, and vulnerability management.

Nice-to-haves

• Graduate degree in a STEM field or IT Security program.
• CISSP, CISM, CISA, or CRISC certifications.
• Experience establishing a Cyber Supply Chain Risk Management program.
• Previous experience as a corporate CISO or head of a Cybersecurity practice.
• Experience with federal agencies such as DoD or DHS.
• TS/SCI with Full Scope Polygraph or CI Polygraph.
• Experience maintaining IL6, SCIF, and SAP environments.

Benefits

• Competitive salary
• Health insurance
• Retirement savings plan
• Professional development opportunities
• Flexible work arrangements