Chief Information Security Officer, Director

Lmi Consulting - Tysons, VA

Full-time - Senior

Tysons, VA

Professional, Scientific, and Technical Services

About the position

The Chief Information Security Officer (CISO) at LMI is responsible for securing the organization's information systems and managing cybersecurity risks while ensuring compliance with government regulations. This leadership role involves developing and implementing cybersecurity strategies, establishing governance frameworks, and regularly briefing executive leadership on security posture and emerging threats. The CISO will work closely with various stakeholders to architect and implement security practices that align with business objectives and regulatory requirements.

Responsibilities

• Develop and implement cybersecurity strategies that align with LMI's goals and government security requirements.
• Establish governance frameworks including policies, procedures, and governance structures for consistent cybersecurity management.
• Regularly brief executive leadership on the security posture, plans, and emerging threats.
• Ensure compliance with federal regulations and standards such as ISO 2700X, NIST SP 800-53, and CMMC.
• Prepare the organization for audits and certifications related to government cybersecurity compliance.
• Identify and manage cybersecurity risks, including third-party risks and insider threats.
• Implement robust access controls, encryption standards, and other technical security measures on sensitive information.
• Manage security operations and oversee security operations centers (SOCs) for continuous monitoring and incident response.
• Collaborate with government entities for security audits, reporting, and remediation efforts.
• Implement cybersecurity awareness and training programs across the organization.
• Manage third-party and supply chain security to ensure compliance with cybersecurity requirements.
• Develop, test, and communicate business continuity and disaster recovery plans.
• Allocate and manage the budget for cybersecurity initiatives, tools, and staff.

Requirements

• Demonstrated experience in leadership roles in information security, risk management, and IT or OT security.
• Knowledge of information security management frameworks such as ISO/IEC 27001, ITIL, and COBIT.
• Experience leading support and response to external security audits.
• Degree in a STEM field or equivalent work-related experience.
• 10+ years of experience in cybersecurity or information security roles with increasing responsibility.
• Experience designing and implementing cybersecurity architectures, including secure network and system design.
• Familiarity with firewalls, intrusion detection systems, endpoint protection, and vulnerability management.

Nice-to-haves

• Graduate degree in a STEM field or an IT Security or Cybersecurity program.
• CISSP, CISM, CISA, CRISC, or similar credentials.
• Experience establishing a Cyber Supply Chain Risk Management program.
• Previous experience as a corporate CISO or head of a Cybersecurity practice.
• Experience with federal agencies such as DoD or DHS.
• TS/SCI with Full Scope Polygraph or CI Polygraph.
• Experience maintaining IL6, SCIF, and SAP environments.

Benefits

• Competitive salary
• Health insurance
• Retirement savings plan
• Professional development opportunities
• Flexible work arrangements