Chief Information Security Officer

Lewis Brisbois•Los Angeles, CA

2d•$250,000 - $350,000•Hybrid

About The Position

The Los Angeles, CA office of Lewis Brisbois, a full-service AmLaw 100 firm, is seeking a Chief Information Security Officer. The Chief Information Security Officer (CISO) is a senior executive responsible for developing, implementing, and overseeing a comprehensive, enterprise-wide security strategy to protect the firm’s clients, information, and reputation. The CISO leads all aspects of cybersecurity, privacy, and risk management in alignment with the firm’s strategic objectives and professional obligations. We offer competitive compensation and in addition, Lewis Brisbois offers a range of benefits including medical, dental, vision, life insurance, 401k with employer match, as well as sick and vacation time. We also offer excellent opportunities for growth and advancement while working with a collaborative team.

Requirements

Bachelor’s degree in Information Security, Computer Science, or related field.
8+ years of experience in cybersecurity, information security, or enterprise risk management.
6+ years in a senior leadership role managing global security programs.

Nice To Haves

Master’s degree.
Relevant certifications such as CISSP, CISM, CISA, CRISC, or equivalent.
Experience within a law firm, professional services firm, or highly regulated industry.

Responsibilities

Develop and execute a firm-wide security strategy encompassing cybersecurity, data protection, and operational resilience.
Establish governance frameworks aligned with industry best practices (e.g., NIST, ISO, SOC 2).
Lead the design, implementation, and continuous improvement of the firm’s information security program.
Protect client confidentiality and attorney-client privilege through robust technical and procedural controls.
Oversee threat detection, incident response, digital forensics, and vulnerability management.
Ensure secure architecture across cloud, on-premise, and hybrid environments.
Ensure compliance with applicable data protection, privacy, and cybersecurity regulations (e.g., GDPR, CCPA, HIPAA requirements where applicable).