Vice President of Cybersecurity & Chief Information Security Officer; CISO

Position: Vice President of Cybersecurity & Chief Information Security Officer (CISO)
## Vice President of Cybersecurity & Chief Information Security Officer (CISO)
Apply:
Simi Valley, CA:
Germantown, MD:
Full time:
Posted 4 Days Ago:
8369
** Worker Type
** Regular
* * Job Description
**** Summary
* * The “Vice President of Cybersecurity & Chief Information Security Officer (CISO)” is a senior executive responsible for establishing, implementing, and maintaining AV’s enterprise vision, strategy, and cybersecurity program to ensure the confidentiality, integrity, and availability of the organization’s information assets and technology resources.  The CISO provides strategic leadership for the organization’s cybersecurity function in support of both classified and unclassified defense programs.

This role is responsible for ensuring compliance with Department of Defense (DoD) cybersecurity requirements, advancing the organization’s Cybersecurity Maturity Model Certification (CMMC) posture, implementing and maintaining alignment with National Institute of Standards and Technology (NIST) frameworks, and ensuring adherence to applicable federal laws, regulations, and contractual obligations. Additionally, the CISO will develop and execute cybersecurity strategies that support AV’s accelerated growth, acquisition, and integration initiatives.  

Reporting to the Chief Information Officer (CIO), the CISO serves as the principal advisor to executive leadership and the Board of Directors on all matters related to cybersecurity, information security governance, cyber risk management, and the protection of Controlled Unclassified Information (CUI), classified national security information, and other sensitive organizational assets.  
** Position Responsibilities*
* ** Strategic Leadership & Governance
*** Develop and implement comprehensive cybersecurity strategy aligned with business objectives and national security requirements
* Establish and maintain information security governance framework, policies, standards, and procedures
* Serve as primary liaison with government customers, Defense Contract Management Agency (DCMA), Defense Counterintelligence and Security Agency (DCSA), and other regulatory bodies
* Provide regular briefings to the Board of Directors, CEO, and executive leadership on security posture, risks, and initiatives
* Lead enterprise risk management activities related to cybersecurity and information protection
* Oversee cybersecurity budget planning, resource allocation, and investment prioritization  
** Compliance & Regulatory Management
*** Ensure organizational compliance with NIST SP 800-171, CMMC 2.0, DFARS, ITAR, and other applicable regulations
* Lead and maintain Cybersecurity Maturity Model Certification (CMMC) readiness and certification efforts
* Manage System Security Plan (SSP) development, Plan of Action & Milestones (POA&M), and continuous monitoring programs
* Oversee NIST 800-53 control implementation for classified systems and Risk Management Framework (RMF) authorization processes
* Coordinate with Defense Industrial Base (DIB) Cybersecurity Program requirements
* Develop and execute insider threat detection and prevention programs
* Lead international cybersecurity compliance strategy, ensuring adherence to
** UK MoD DEFCON 658 / Def Stan 05-138**,
** Cyber Essentials Plus**,
** UK/EU GDPR**, and applicable international data privacy and sovereignty regulations.
* Establish cross-border data transfer controls and security architectures supporting NATO, AUKUS, and Five Eyes allied defense initiatives.  
** Technical Security Operations
*** Direct enterprise security operations including Security Operations Center (SOC), incident response, and threat intelligence
* Oversee implementation and management of security technologies including SIEM, EDR, DLP, IAM, and…