Chief Information Security Officer
Hybrid
Full Time
#Technology
#Information Security
#Cybersecurity
#Cloud Security
#Network Security
#Risk Management
At Charles River Associates, we pride ourselves on being a leading global consulting firm that provides rigorous, fact-based expertise to governments, major corporations, and law firms. Since 1965, our work has helped clients navigate complex financial and economic challenges with clear, actionable solutions. Our Information Technology department is the backbone of this mission, consisting of 40 dedicated professionals spread across international and domestic offices. We are currently looking for a strategic leader to join this team and help us protect the integrity of our global infrastructure.
The opportunity
As our Chief Information Security Officer, you will serve as the primary architect of our information security program. Reporting directly to the Chief Information Officer, you will take ownership of our security strategy, ensuring that our policies and procedures effectively safeguard our assets while maintaining compliance with global standards. This is an executive-level role that requires a blend of deep technical expertise and the ability to communicate complex risks to both technical teams and non-technical stakeholders across the firm.
A day in the life
- You will define and execute a comprehensive cybersecurity strategy, overseeing everything from application security and cloud protection to enterprise-wide risk management.
- You will mentor and lead our security professionals, fostering a high-performing team culture while managing third-party oversight and incident response protocols.
- You will collaborate with legal and compliance departments to ensure we maintain vital certifications like SOC2 and ISO27001, while keeping our leadership informed on the evolving threat landscape.
Who you are
You are a seasoned executive with over a decade of experience in information security, including at least three years in a CISO capacity. You possess a strong background in building enterprise-level security frameworks and have a proven track record of leading teams through complex projects. Your qualifications include:
- A Bachelor's degree in a technical or business-related field, with an advanced degree preferred.
- A current CISSP certification, with additional credentials like CISM or CRISC being highly desirable.
- Deep familiarity with NIST, ISO 27001, and global privacy regulations, alongside hands-on knowledge of cloud platforms like AWS and Azure.
- Exceptional communication skills, allowing you to translate technical security initiatives into clear business strategies for executive leadership.
- Fluency in English.
Why you'll love it here
We believe in the power of collaboration and the value of face-to-face mentorship, which is why we offer a hybrid work environment. You will have the opportunity to work alongside a talented, global team in a firm that values fact-based analysis and professional growth. We are an equal opportunity employer and are committed to maintaining an inclusive workplace where all qualified individuals can thrive.
