Chief Information Security Officer (CISO)

Job Title: Chief Information Security Officer (CISO)

Location: Chantilly, VA

Reports to: CEO/Executive Leadership Team

About Us:

At REDLattice, we are a global leader in providing differentiated technical cybersecurity products and services. As we continue to evolve in a rapidly changing digital landscape, we are seeking an experienced, strategic, and hands-on Chief Information Security Officer (CISO) to strengthen our cybersecurity posture and drive our security-first culture across all levels of the organization.

We are driven by impactful and innovative projects that contribute directly to safeguarding our country's and strategic partner's critical infrastructure. Our teams are engaged in advanced vulnerability analysis and solutions that meet the complex demands of our mission. With offices in Northern Virginia, Melbourne, Florida, Tel Aviv, Israel, and other locations, we are expanding rapidly to support the evolving needs of our customers and partners.

Position Summary:

We are seeking an experienced, strategic, and hands-on Chief Information Security Officer (CISO) to join our team in our Chantilly, VA Headquarters. This role requires a dynamic leader who can enhance our cybersecurity posture and foster a security-first culture across all levels of the organization.

What You'll Do:

As CISO at REDLattice, you will:

• Strategic Leadership: Lead a team and ensure alignment of cybersecurity strategies with business objectives across diverse and dynamic global markets.
• Security Policy Development: Develop, implement, and enforce comprehensive security policies that safeguard company assets, including intellectual property and sensitive data at all levels of classification and at locations around the world.
• Risk Management & Compliance: Conduct risk assessments, develop risk mitigation strategies, and ensure compliance with critical regulations such as CMMC, NIST 800-171/53, ITAR, HIPAA, SOC, and ISO.
• Incident Response & Recovery: Lead incident detection, response, and recovery processes to swiftly mitigate risks and minimize impact on operations.
• Cybersecurity Strategy: Create, execute, and refine long-term cybersecurity strategies that evolve with emerging threats, cloud computing, and hybrid environments.
• Security Operations Center Leadership: Oversee the management of our internal Security Operations Centers (SOC), ensuring efficient monitoring, detection, and response to cybersecurity incidents and administration of our global footprint.
• Vendor & Third-Party Risk Management: Manage third-party and vendor risk, ensuring partners meet rigorous cybersecurity standards.
• Training & Awareness: Develop company-wide training and awareness programs to foster a security-conscious culture across all teams.
• Security Architecture: Oversee the design and implementation of a robust security infrastructure that supports the company's growth and innovation.
• Stakeholder Communication: Regularly report on the state of cybersecurity to senior leadership and the board, providing expert guidance on emerging risks, security initiatives, and investments.
• Cultural Alignment: Drive a security-first mindset that is embedded within our organization's culture, values, and mission.
• Leadership Development: Mentor and develop cybersecurity leaders within the organization, ensuring a pipeline of talent for future growth.

Key Projects You Will Lead:

• Cybersecurity Roadmap Development: Lead the creation of a multi-year cybersecurity roadmap that aligns with REDLattice's business goals and enhances the company's security posture.
• Cyber Defense Enhancement: Deploy next-gen security technologies such as firewalls, SIEM, and endpoint security to further strengthen defenses against evolving cyber threats.
• Compliance and Governance: Spearhead initiatives to maintain compliance with CMMC, NIST, ITAR, HIPAA, and other regulatory frameworks, ensuring continuous risk management.
• Cybersecurity Training & Awareness: Implement a comprehensive security awareness and training program that empowers employees to recognize their role in cybersecurity.
• Incident Response Protocols: Lead continuous improvements to our incident response capabilities, ensuring swift recovery from any breaches.
• Security Architecture & Design: Oversee the design of secure, scalable security architectures that protect sensitive data while supporting the organization's growth.

Required Qualifications:

• Educational Background: A Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.
• Certifications: Professional certifications such as CISSP, CISM, CISA, or GIAC (e.g., GSEC, GCIH) required.
• Leadership Experience: Proven experience leading cybersecurity teams and aligning security initiatives with broader business objectives.
• Cybersecurity Expertise: Strong foundational knowledge of cybersecurity principles, practices, and technologies, with hands-on experience in managing security frameworks in complex environments.
• Compliance Knowledge: In-depth understanding of compliance frameworks, including CMMC, NIST 800-171/53, ITAR, HIPAA, and other industry standards.
• Risk Management Experience: Demonstrated experience in risk assessments, mitigation strategies, and regulatory compliance across global organizations.
• Incident Response Skills: Expertise in managing and resolving security incidents, ensuring business continuity and minimal impact to operations.
• Communication Skills: Excellent communication abilities, capable of translating complex cybersecurity concepts into actionable insights for both technical and non-technical stakeholders.
• Security Clearance: Active clearance is required.

Preferred Qualifications:

• Extensive Leadership: 15+ years in cybersecurity, with 8+ years in leadership roles in high-growth or highly regulated environments.
• Advanced Certifications: CISSP, CISM, or specialized GIAC certifications (e.g., GCFA, GNFA) are highly desirable.
• Master's Degree: Advanced degree in Cybersecurity, Information Technology, or a related field preferred.
• Defense Contracting Experience: Experience working with U.S. defense contractors and/or global organizations implementing ITAR, CMMC, and NIST standards.
• Cloud Security Expertise: Proven experience securing cloud environments (AWS, Azure) and managing hybrid infrastructure security.
• Global Security Operations: Experience managing global, distributed security operations and third-party risk management.
• Cybersecurity Technologies: Deep knowledge of emerging security technologies, including threat intelligence, SIEM, IAM, and advanced endpoint security.
• Cultural Alignment: Demonstrated ability to embed a security-first culture in a mission-driven and values-focused organization.
• Leadership Development: Strong track record of mentoring and developing cybersecurity talent.

What Success Looks Like:

• Security Foundation: Deliver comprehensive security assessments, build a strategic roadmap, and lead a top-tier security team to effectively defend the company's assets.
• Business Integration: Forge trusted partnerships across departments, integrating security into every aspect of the business strategy, ensuring alignment, and fostering stakeholder trust.
• Security Culture: Establish a security-aware culture across the organization, ensuring continuous regulatory compliance and a proactive, collaborative approach to security.

What We Offer:

• Competitive salary and benefits package
• Flexible work environment with remote options
• Opportunities for professional development and certifications
• A dynamic, mission-driven, and values-focused work culture

Equal Employment Opportunity Statement:

REDLattice is an equal-opportunity employer. We value diversity and strive to create an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, or membership in any other group protected by federal, state, or local law.

Join us at REDLattice and be a part of a team that is at the forefront of cyber innovation and security. Apply today!