Vice President of Cybersecurity & Chief Information Security Officer (CISO

Job Description

The “Vice President of Cybersecurity & Chief Information Security Officer (CISO)” is a senior executive responsible for establishing, implementing, and maintaining AV’s enterprise vision, strategy, and cybersecurity program to ensure the confidentiality, integrity, and availability of the organization’s information assets and technology resources.

Regular

The “Vice President of Cybersecurity & Chief Information Security Officer (CISO)” is a senior executive responsible for establishing, implementing, and maintaining AV’s enterprise vision, strategy, and cybersecurity program to ensure the confidentiality, integrity, and availability of the organization’s information assets and technology resources.

• Develop and implement comprehensive cybersecurity strategy aligned with business objectives and national security requirements
• Establish and maintain information security governance framework, policies, standards, and procedures
• Serve as primary liaison with government customers, Defense Contract Management Agency (DCMA), Defense Counterintelligence and Security Agency (DCSA), and other regulatory bodies
• Provide regular briefings to the Board of Directors, CEO, and executive leadership on security posture, risks, and initiatives
• Lead enterprise risk management activities related to cybersecurity and information protection
• Oversee cybersecurity budget planning, resource allocation, and investment prioritization

• Ensure organizational compliance with NIST SP 800-171, CMMC 2.0, DFARS, ITAR, and other applicable regulations
• Lead and maintain Cybersecurity Maturity Model Certification (CMMC) readiness and certification efforts
• Manage System Security Plan (SSP) development, Plan of Action & Milestones (POA&M), and continuous monitoring programs
• Oversee NIST 800-53 control implementation for classified systems and Risk Management Framework (RMF) authorization processes
• Coordinate with Defense Industrial Base (DIB) Cybersecurity Program requirements
• Develop and execute insider threat detection and prevention programs
• Lead international cybersecurity compliance strategy, ensuring adherence to UK MoD DEFCON 658 / Def Stan 05-138, Cyber Essentials Plus, UK/EU GDPR, and applicable international data privacy and sovereignty regulations.
• Establish cross-border data transfer controls and security architectures supporting NATO, AUKUS, and Five Eyes allied defense initiatives.

• Direct enterprise security operations including Security Operations Center (SOC), incident response, and threat intelligence
• Oversee implementation and management of security technologies including SIEM, EDR, DLP, IAM, and encryption solutions
• Ensure secure system development lifecycle practices and Dev Sec Ops  integration
• Manage vulnerability management, penetration testing, and security assessment programs
• Direct cloud security architecture and controls for classified and unclassified environments
• Oversee identity and access management programs including privileged access management
• Oversee cybersecurity governance for Special Access Programs (SAP/SAR), SCIF network operations, COMSEC, and TEMPEST compliance in coordination with Government Security/OPSEC teams.

• Lead cyber incident response planning, coordination, and execution
• Ensure timely reporting of cyber incidents to DoD, FBI, and other required agencies per DFARS
• Coordinate with legal, CIO along with executive teams during security incidents
• Oversee business continuity and disaster recovery planning for critical security systems
• Manage relationships with external incident response partners and forensic specialists

• Establish and enforce third-party risk management and vendor security assessment programs
• Oversee supply chain security controls and acquisition security requirements
• Ensure subcontractor cybersecurity compliance flows down through contracts
• Manage security requirements for cloud service providers and managed service providers

• Build, lead, and mentor…