Deputy CISO

RK&K•Baltimore, MD

3d•$180,000 - $220,000•Onsite

About The Position

RK&K's Baltimore office is seeking a Deputy Chief Information Security Officer to lead the development and execution of a dedicated cybersecurity program. Reporting directly to the Chief Information Officer, the Deputy CISO will be responsible for all cybersecurity operations, cyber risk management, security architecture, incident response, governance, compliance, and the long-term strategy required to protect RK&K’s people, data, systems, clients, and business operations. This is a foundational leadership role. This position will be responsible for building a standalone cybersecurity function from the ground up. The Deputy CISO will separate cybersecurity responsibilities from traditional IT operations, establish clear ownership of security controls and risk decisions, and create a scalable security operating model that supports RK&K’s continued growth. The Deputy CISO will partner closely with the CIO to define cybersecurity strategy, prioritize investments, strengthen cyber resilience, and align security initiatives with business objectives. This role requires a hands-on leader who can operate strategically while also building practical capabilities, policies, processes, tools, and teams.

Requirements

Bachelor’s degree in computer science, information technology, business administration, or related field.
10 or more years of progressive experience in information technology, cybersecurity, risk management, security engineering, infrastructure, or related disciplines.
5 or more years of cybersecurity leadership experience, including responsibility for security operations, incident response, governance, or cyber risk management.
Experience developing cybersecurity strategy, roadmaps, policies, standards, operating models, and governance processes.
Strong understanding of cybersecurity operations, including monitoring, detection, response, vulnerability management, endpoint security, identity security, and incident response.
Experience with cyber risk assessments, risk registers, control maturity assessments, remediation planning, and executive risk reporting.
Experience leading incident response activities, tabletop exercises, post-incident reviews, and cyber crisis coordination.
Familiarity with enterprise security technologies such as SIEM, EDR/XDR, MDR, vulnerability management platforms, firewalls, email security, identity platforms, DLP, CASB, PAM, and cloud security tools.
Strong knowledge of identity and access management, privileged access, multi-factor authentication, conditional access, single sign-on, and access reviews.
Experience supporting security audits, client questionnaires, contract security requirements, cyber insurance, or compliance reviews.
Ability to lead strategically while also operating hands-on in a developing security environment.

Nice To Haves

Professional certifications such as CISSP, CISM, CISA, CRISC, GIAC, CCSP, CGRC, or similar credentials.
Experience supporting organizations with distributed offices, remote employees, field operations, project-based work, or client-driven security requirements.
Experience developing or overseeing managed detection and response, managed SOC, or co-managed security operations models.
Experience with data classification, data loss prevention, records management, secure collaboration, and document protection.
Experience with business continuity, disaster recovery, ransomware readiness, and backup resilience.
Experience presenting cybersecurity risks, plans, and investment needs to executive leadership or board-level audiences.
Experience leading organizational change, especially where security responsibilities are being separated from legacy IT operations.

Responsibilities

Serve as RK&K’s senior cybersecurity leader responsible for day-to-day cyber operations and execution of the firm’s cybersecurity roadmap.
Partner with the CIO to develop, maintain, and execute a multi-year cybersecurity strategy aligned with RK&K’s business goals, client expectations, regulatory obligations, and risk appetite.
Provide regular reporting to the CIO and executive leadership on security posture, risk trends, major initiatives, incidents, metrics, and investment needs.
Advise the CIO on cybersecurity budget priorities, technology investments, staffing plans, vendor selection, and risk tradeoffs.
Create annual and multi-year security plans with measurable goals, timelines, milestones, and success criteria.
Represent cybersecurity in strategic technology planning, enterprise architecture decisions, digital transformation initiatives, acquisitions, client requirements, and major business initiatives.
Develop and lead RK&K’s cyber operations program, including security monitoring, detection, response, vulnerability management, endpoint security, identity security, email security, cloud security, and threat management.
Develop and lead RK&K’s cybersecurity governance, risk, and compliance program.
Lead a formal cyber risk acceptance and exception process.
Align cybersecurity compliance with contractual, regulatory, client-driven, and industry-specific cybersecurity requirements.
Establish security architecture principles, standards, and review processes for infrastructure, applications, cloud services, networks, endpoints, and identity platforms.
Partner with IT operations and enterprise architecture teams to ensure security is embedded into technology design and implementation.
Establish data protection strategies for sensitive business information, client data, employee data, financial data, intellectual property, and regulated information.
Establish security requirements for document management, collaboration platforms, file shares, project data, client deliverables, and mobile access.
Develop incident response policies, plans, playbooks, communication templates, escalation matrices, and decision trees.
Conduct tabletop exercises with executive leadership, IT, legal, HR, finance, communications, and business stakeholders.
Establish ransomware readiness plans, including containment strategies, backup validation, recovery priorities, communication plans, and decision-making processes.
Ensure backup environments are protected from compromise, unauthorized deletion, encryption by ransomware, and credential abuse.
Define and maintain metrics for mean time to detect, mean time to respond, incident volume, root causes, recurring issues, and control failures.