Chief Information Security Office

Summary

The Chief Information Security Officer (CISO) is an enterprise executive accountable for establishing and leading the organization's cybersecurity, information risk, privacy, and cyber resilience strategy. The role involves defining governance, architecture, and operating priorities to protect the organization, clients, regulated data, and intellectual property while enabling digital transformation and cloud adoption. The CISO advises executive leadership and the Board on material cyber risk, regulatory obligations, threat conditions, and investment priorities, and leads enterprise security coordination, incident readiness, and partnerships across IT, Legal, Privacy, and business units. The position includes executive sponsorship for DevSecOps practices and federal compliance programs including NIST SP 800-171, DFARS, CUI, FCI, and CMMC.