Chief Information Security Officer

Responsibilities

• Develop and execute enterprise-wide information security strategy, risk management, and governance
• Serve as the executive risk authority and primary advisor to the CEO on cyber risk
• Oversee the Director of Security Compliance and Director of Information Technology
• Represent the company's security posture in customer-facing and government engagements
• Adapt application security processes to AI-native threat hunting realities
• Lead efforts to safeguard production infrastructure, cloud platforms, and mission-critical systems
• Own the enterprise Governance, Risk, and Compliance (GRC) framework
• Provide executive sponsorship for CMMC Level 2 compliance and DFARS requirements
• Build and sustain a security-aware culture across the organization

Requirements

• Progressive experience in cybersecurity or information assurance in a senior leadership role
• Deep familiarity with CMMC Level 2 requirements and NIST SP 800-171
• Experience leading DoD contractor compliance programs (DFARS, SPRS, SAM.gov)
• Proven ability to manage high-performing security and IT teams
• Experience overseeing Incident Response functions and government reporting
• Active DoD TS/SCI security clearance

Preferred Qualifications

• Active CISSP, CISM, CCISO, or equivalent certification
• Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field
• Experience as a C3PAO assessor or CMMC Registered Practitioner
• Familiarity with ITAR, EAR, and export control compliance
• Experience with cloud-native/hybrid environments and AI governance frameworks
• Prior experience in a fast-growth defense technology startup

Benefits

• 100% company-paid medical, dental, and vision premiums
• 401k retirement plan and company stock options
• Flexible Time Off (FTO) plus federal holidays and extended holiday breaks
• Paid parental leave
• Home office budget
• Reimbursement for approved trainings, subscriptions, and conferences

About the Company

Defense Unicorns delivers mission value by streamlining software delivery for defense and civil agencies. We create secure solutions for continuous software integration and delivery, focusing on Kubernetes, cloud-native applications, and GitOps to meet high-security requirements for mission owners.