Chief Information Security Officer (CISO)

Responsibilities

• Lead enterprise cybersecurity strategy aligned to business and DoD/DIB requirements
• Manage Governance, Risk, and Compliance (GRC) program/personnel, ensuring alignment with NIST 800‑171 Rev. 2, CMMC, and Cyber Supply Chain Risk Management (C-SCRM) requirements for Defense Industrial Base (DIB)
• Serve as the stakeholder for cybersecurity audits, assessments, and regulatory engagements, including CMMC and NIST‑based assessments
• Set the strategic direction for cybersecurity compliance maturity
• Provide oversight and approval for enterprise risk, policy, and control frameworks
• Maintain and mature compliance with CMMC Level 2, NIST SP 800-171, and DFARS 252.204-7012 and 7021
• Maintain accountability for Plans of Action and Milestones (POA&Ms) and System Security Plan
• Direct incident response, including reporting obligations
• Solid understanding of threat detection, security monitoring, and response workflows
• Experience providing leadership and oversight for Security Operations Center (SOC) functions
• Report on cyber risk posture to executive leadership and the Board

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science/Engineering, Information Technology
• 10+ years in cybersecurity, including leadership experience
• Demonstrated ownership of CMMC Level 2 implementation and assessment preparation
• Direct experience within a DoD contractor/DIB organization leading information risk, security and governance teams
• Experience establishing and overseeing a C‑SCRM program aligned with NIST SP 800‑161
• Experience overseeing risk management, compliance governance, and audit readiness within DIB
• Experience providing security and risk governance across on-premises and cloud-based environments
• Strong working knowledge of CMMC certification processes, including control intent, assessment objectives, and POA&M governance
• Experience scaling GRC programs to support organizational growth
• Project management skills and technology acumen
• Experience with emerging AI governance frameworks
• Deep expertise in NIST SP 800-171 and DFARS cybersecurity clauses
• Experience securing hybrid enterprise and cloud environments
• CISSP (Certified Information Security Systems Professional) and CISM (Certified Information Security Manager) certifications

About Frontgrade

At Frontgrade, we build mission-critical electronics that perform without compromise in the world’s most demanding environments, from deep space to national defense. With decades of proven heritage, we deliver high-reliability components, subsystems, and integrated solutions trusted when failure is not an option. But our strength is not just in what we build. It is in the people who make it possible. From engineers and product managers to sales teams, marketers, and skilled manufacturing professionals, every role plays a direct part in enabling missions that protect, explore, and connect our world. We move with purpose, collaborate across disciplines, and take pride in delivering solutions our customers rely on in the highest-stakes environments. If you want your work, whatever your specialty, to contribute to something bigger, you will find your place at Frontgrade.