Chief Information Security Officer
private companyArlington (VA)
Chief Information Security Officer
Posted 2 days ago
private companyArlington (VA)
SENIORITY
Director
About the role
We are seeking a hands-on Chief Information Security Officer (CISO) to lead and execute the company's cybersecurity program in support of federal government contracts. This is a senior-level individual contributor role with no direct reports, responsible for enterprise-wide information security strategy, compliance, and risk management. If you are interested in applying for this job, please make sure you meet the following requirements as listed below.
Key Responsibilities:
- Serve as the organization's senior authority on cybersecurity and advise executive leadership on risk and strategy
- Develop, implement, and maintain enterprise-wide security policies, standards, and controls
- Ensure compliance with NIST 800-53, NIST 800-171, CMMC, CMMI, ISO 9K, ISO 20K, ISO 27K, RMF, and other federal requirements
- Manage Authority to Operate (ATO) processes and interface with auditors and assessors
- Conduct risk assessments, vulnerability analysis, and risk mitigation activities
- Oversee incident response planning and execution
- Review proposed system architectures to ensure "Security by DesignGuide secure architecture across network, cloud, and endpoint environments
- Collaborate with program teams and support security requirements for proposals
Required Qualifications:
- Active TS/SCI clearance or ability to obtain
- Bachelor's degree or equivalent experience 10+ years of progressive cybersecurity experience
- List of IT and Security certifications
- List and provide experience in Monitoring and secure communications platforms-Experience in xmcpwfu a government contracting environment
- Strong knowledge of NIST frameworks, RMF, and federal compliance requirements
- Hands‐on experience with network, cloud, and endpoint security
- Ability to operate independently without direct reports
- Excellent communication and stakeholder engagement skills
Preferred Qualifications:
CISSP, CISM, or similar certification Familiarity with classified environments and SCIF operations
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.