Chief Information Security Office

Job Description: Take Your Corporate Career to the Next Level Kleinfelder, a Forbes' Top Employer for Engineers in North America, is committed to a people-first culture, technical excellence, and creating opportunities where employees can thrive! Are you ready to be challenged, make a difference, and experience professional growth in your career? Kleinfelder’s Corporate Services team is looking for you! From Accounting & Finance, Human Resources, Marketing & Communications, and Information Technology to Legal and Health & Safety, our corporate employees are part of the Kleinfelder ecosystem – supporting the projects that improve the communities we work and live in. Step into Your New Role The Chief Information Security Officer (CISO) is the enterprise executive accountable for the cybersecurity, information risk, privacy-supporting security, and cyber resilience program. The CISO establishes strategy, governance, architecture, and operating priorities that protect the organization, its clients, regulated data, intellectual property, and business operations while enabling growth, digital transformation, cloud adoption, artificial intelligence, and secure delivery of technology-enabled services. The CISO advises executive leadership and the Board on material cyber risk, regulatory and contractual obligations, threat conditions, investment priorities, and risk acceptance. The role leads enterprise security, coordinates incident readiness and response, and partners with Information Technology, Legal, Privacy, Human Resources, Internal Audit, Procurement, Operations, and business leadership. The CISO also provides executive sponsorship for secure-by-design and DevSecOps practices and for federal compliance programs, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), NIST SP 800-171, DFARS cybersecurity requirements, and Cybersecurity Maturity Model Certification (CMMC). Accepting applications through November 6, 2026. KEY RESPONSIBILITIES Enterprise Security Strategy, Governance and Leadership Own and maintain a multi-year enterprise cybersecurity strategy, operating model, roadmap, and investment plan aligned with business objectives, enterprise risk appetite, legal obligations, client commitments, and the evolving threat landscape. Lead cybersecurity governance and provide concise, decision-ready reporting to executive leadership and the Board on risk posture, incidents, control effectiveness, program maturity, investment needs, and remediation progress. Define clear accountability across the three lines model; establish enterprise security policies, standards, control objectives, exceptions, and risk acceptance processes with documented business ownership. Build, lead, develop, and retain a high-performing security organization; define roles, succession plans, performance measures, and strategic sourcing models for internal and managed security capabilities. Manage the cybersecurity operating and capital budgets, workforce plan, technology portfolio, and third-party services to optimize risk reduction and business value. Cyber Risk, Compliance and Federal Contracting Own the enterprise cyber risk management framework and maintain consistent methods for identifying, assessing, prioritizing, treating, accepting, monitoring, and reporting information security risk. Partnering with Director of Federal Compliance, provide executive oversight for federal cybersecurity compliance, including FCI and CUI scoping, shared-responsibility models, evidence retention, continuous monitoring, and assessment readiness. Oversee implementation and sustainment of applicable requirements under CMMC, NIST SP 800-171 and related assessment objectives, DFARS cybersecurity clauses, FAR safeguarding requirements, governance for Systems Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), assessment results and contractual incident-reporting and information-protection obligations. Partner with Le…

View the full posting and apply