> Markdown version of [/jobs/ext/4607527-chief-information-security-officer-ciso](https://www.wearedevelopers.com/jobs/ext/4607527-chief-information-security-officer-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Chief Information Security Officer (CISO)

- **Company:** Houlihan Lokey
- **Location:** Los Angeles, CA, United States
- **Experience:** Expert
- **Salary:** $325,000 - $350,000
- **Contract:** Permanent contract
- **Skills:** Microsoft Access, Artificial Intelligence, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Information Leak Prevention, Identity and Access Management, Anti-Phishing, Red Team (Cyber Security), Zero Trust Network Access, Security Information and Event Management, Cloud Platform System, Software Security, Information Technology
- **Published:** November 6, 2026
- **Apply:** https://www.adzuna.com/details/5954096526

## About the Role

* 15+ years of progressive information security experience, including at least 5 years leading an enterprise security function in a global, regulated environment.
 * Demonstrated ownership of a full security program, built or matured against a recognized framework such as the NIST Cybersecurity Framework or ISO 27001.
 * Experience reporting to boards, audit committees, and regulators, translating technical risk into business terms and metrics.
 * Deep working knowledge across security operations, identity and privileged access, cloud security, zero-trust access, data protection, and application security.
 * Proven incident response leadership, including coordination with external counsel, response partners, and executives.
 * Experience writing and enforcing policy in a professional services or partnership culture.
 * Bachelor's degree in Information Technology, Computer Science, or a related field. Master's degree or MBA preferred., * CISSP, CISM, or equivalent certification, along with a current cloud security certification.
 * Experience in investment banking or another regulated financial services environment.
 * Experience leading security due diligence and integration for acquisitions.
 * Experience consolidating a multi-vendor security stack and securing a hybrid estate through a cloud migration.
 * Experience governing AI-assisted development and tools built by business users.

Soft Skills

 * Communicate with clarity and credibility at every level, and influence without relying on authority.
 * Balance judgment and pragmatism, enabling new technology safely rather than defaulting to restriction.
 * Hold a firm line where it matters while preserving strong working relationships.
 * Stay composed and decisive under pressure, and take full ownership of outcomes.

## Description

* Own the firm's information security strategy, operating model, budget, and multi-year roadmap, grounded in a risk-based assessment against the NIST Cybersecurity Framework and a prioritized maturity plan with measurable milestones.
 * Partner with Legal and Compliance to author security policies and standards, and own their communication and enforcement firm-wide.
 * Deliver risk-based reporting to senior management, the audit committee, and the Board, and lead the firm's cybersecurity governance forum.
 * Direct security operations with the firm's managed detection and response and SOC providers, including SIEM modernization, monitoring across endpoint, identity, cloud, and SaaS, AI-enabled triage and response, and 24/7 incident response.
 * Own identity and access management, including multi-factor and passwordless authentication, privileged access, and least-privilege access models.
 * Mature vulnerability and exposure management across internal, external, and cloud environments, with clear remediation ownership and service levels.
 * Own data protection and governance, including classification, encryption, data loss prevention, and support for legal and discovery requests.
 * Establish application security standards for both professional and business-led development, including guardrails for AI-enabled development and agentic tooling.
 * Lead the firm's human risk program, including phishing simulations, red team exercises, and heightened protection for publicly visible executives.
 * Rationalize the security tool portfolio and own vendor and third-party security risk, including security due diligence for acquisitions.
 * Ensure compliance with regulatory, privacy, and client contractual requirements, and lead responses to audits, regulator inquiries, and client due diligence.
 * Build, lead, and develop the information security and governance, risk, and compliance teams.
*