Deputy Chief Information/Security Officer

$216,000 - $250,000/Yr

Areté Associates - Falls Church, VA

Full-time - Senior

Falls Church, VA

Professional, Scientific, and Technical Services

About the position

The Deputy Chief Information/Security Officer (DCIO/DCISO) at Areté is a pivotal leadership role responsible for overseeing the company's IT infrastructure, cybersecurity, security, and facilities functions. This position ensures compliance with defense-related security requirements and requires a strategic leader with a robust technical background and strong leadership skills. The DCIO/DCISO will manage a multidisciplinary team and will be instrumental in developing, implementing, and overseeing critical IT and security programs to address complex security challenges.

Responsibilities

• Lead the overall IT strategy, ensuring alignment with business goals and government requirements/regulations.
• Ensure reliable, secure, and scalable IT systems that meet the needs of the organization.
• Oversee the development, implementation, and maintenance of IT systems and services that support company programs and business operations.
• Ensure IT systems and services are compliant with Department of Defense (DoD) standards and regulations, including NIST, DFARS, and other applicable requirements.
• Collaborate with cross-functional teams to ensure IT solutions meet business, security, and compliance requirements.
• Manage IT budgets, including procurement and vendor management, ensuring cost-effective solutions.
• Oversee enterprise-wide IT projects, ensuring they are on time, within scope, and within budget.
• Lead the development and implementation of the company's cybersecurity strategy.
• Manage the company's cybersecurity program, including identifying, analyzing, and mitigating cybersecurity risks.
• Oversee incident response planning and execution, ensuring swift and effective mitigation of cyber threats.
• Ensure compliance with defense-related cybersecurity standards, such as NIST SP 800-171, CMMC, and DFARS 252.204-7012.
• Ensure adherence to security protocols such as NIST SP 800-53, CMMC, and other relevant frameworks.
• Ensure compliance with the National Industrial Security Program Operating Manual (NISPOM) and other DoD guidelines related to industrial security.
• Oversee risk management and security controls to continuously improve the organization's industrial security posture.
• Liaise with Defense Counterintelligence and Security Agency (DCSA) representatives and other federal entities to ensure adherence to security standards and regulations.
• Oversee the security and operational readiness of physical facilities, including access control, surveillance, and incident response.
• Ensure compliance with DoD requirements for secure areas, SCIFs, and other restricted spaces.
• Coordinate with executive leadership to align facilities management with operational and security goals.
• Oversee the management of company facilities, ensuring efficient, safe, and secure environments for employees and assets.
• Implement and manage safety programs that comply with OSHA, DoD, state regulations, and other relevant safety standards.

Requirements

• Bachelor's degree in IT, cybersecurity, industrial security, or a related field.
• 10+ years of senior-level experience in IT, cybersecurity, or industrial security, with a strong focus on defense-sector requirements.
• Extensive experience with DoD compliance, NISPOM, DFARS, CMMC, and other regulatory frameworks.
• Demonstrated ability to manage cross-functional teams, including IT professionals, cybersecurity experts, and industrial security officers.
• Familiarity with facilities management in a classified environment, including SCIF standards and DoD regulations for secure spaces.
• Knowledge of network architecture, systems administration, risk management, and cybersecurity technologies.
• Leadership and decision-making in high-stakes, regulated environments.
• Strategic thinking with an emphasis on aligning IT, security, and facilities management with defense-sector priorities.
• Strong communication and collaboration skills across technical, operational, and executive leadership levels.
• Skilled in managing incidents, crises, and emergency situations effectively.

Nice-to-haves

• Master's degree in Information Technology, Cybersecurity, Industrial Security, or a related field.
• Relevant certifications in the IT, Cybersecurity and Industrial Security domains.
• Ability to obtain and maintain a TS/SCI security clearance.

Benefits

• Generous PTO and Leave Times
• Flextime Scheduling
• Bereavement
• Paid Time Off (PTO)
• Paid Parental Leave
• 401K Retirement Plan Contribution
• Employee Stock Ownership Plan
• Continuing Education Funds
• Medical Insurance
• Dental & Vision Insurance
• Life Insurance and Long-Term Disability (LTD)
• Vision Reimbursement