Kleinfelder Inc
Kleinfelder Inc·8 days ago

Chief information security office

Apply now

Location

onsite, Boston, Massachusetts, United States

Salary

$183k – $275k/yr

Commitment

Full Time

Level

VP / C-level

Required skills

Cybersecurity strategyRisk managementGovernanceIncident responseComplianceDevSecOpsCloud securityIdentity and access managementVulnerability managementThreat intelligenceData protectionSecurity architectureFederal complianceBudget managementExecutive leadershipThird-party risk management

Job Description

Job Description

Take Your Corporate Career to the Next Level

Kleinfelder, a Forbes' Top Employer for Engineers in North America, is committed to a people-first culture, technical excellence, and creating opportunities where employees can thrive!

Are you ready to be challenged, make a difference, and experience professional growth in your career? Kleinfelder’s Corporate Services team is looking for you! From Accounting & Finance, Human Resources, Marketing & Communications, and Information Technology to Legal and Health & Safety, our corporate employees are part of the Kleinfelder ecosystem – supporting the projects that improve the communities we work and live in.

Step into Your New Role

The Chief Information Security Officer (CISO) is the enterprise executive accountable for the cybersecurity, information risk, privacy-supporting security, and cyber resilience program. The CISO establishes strategy, governance, architecture, and operating priorities that protect the organization, its clients, regulated data, intellectual property, and business operations while enabling growth, digital transformation, cloud adoption, artificial intelligence, and secure delivery of technology-enabled services.

The CISO advises executive leadership and the Board on material cyber risk, regulatory and contractual obligations, threat conditions, investment priorities, and risk acceptance. The role leads enterprise security, coordinates incident readiness and response, and partners with Information Technology, Legal, Privacy, Human Resources, Internal Audit, Procurement, Operations, and business leadership. The CISO also provides executive sponsorship for secure-by-design and DevSecOps practices and for federal compliance programs, including Controlled Unclassified Information (CUI), Federal Contract Information (FCI), NIST SP 800-171, DFARS cybersecurity requirements, and Cybersecurity Maturity Model Certification (CMMC).

Accepting applications through November 6, 2026.

KEY RESPONSIBILITIES

  • Enterprise Security Strategy, Governance and Leadership
  • Cyber Risk, Compliance and Federal Contracting
  • Security Architecture, Cloud and DevSecOps
  • Security Operations, Incident Response and Resilience
  • Data Protection, Third-Party Risk and Workforce Security

POSITION COMPETENCIES

  • Executive leadership and influence
  • Risk-based judgment
  • Strategic execution
  • Collaboration and enablement
  • Crisis leadership
  • Financial and commercial acumen

EXPERIENCE AND ACADEMIC REQUIREMENTS

Education: Bachelor's degree or equivalent experience in Cybersecurity, Computer Science, Information Systems, Engineering, Business Administration, Risk Management, or a related field required. Master's degree or equivalent advanced study preferred.

Required Experience:

  • 12 or more years of progressive experience in cybersecurity, technology risk, information technology, engineering, or related disciplines, including significant enterprise security leadership responsibility.
  • 5 or more years leading managers, multidisciplinary security teams, or enterprise-wide security programs in a complex, distributed organization.
  • Demonstrated experience advising executive leadership or a Board on material cyber risk, incidents, regulatory obligations, program maturity, and investment priorities.
  • Demonstrated ownership of security strategy, governance, architecture, operations, incident response, third-party risk, vulnerability management, identity, data protection, and security awareness capabilities.
  • Experience establishing or governing DevSecOps and secure SDLC practices across CI/CD pipelines, cloud platforms, application development, APIs, Infrastructure as Code, and software supply chains.
  • Experience with federal contracting cybersecurity requirements, including CUI and FCI handling, NIST SP 800-171 implementation or assessment, DFARS cybersecurity obligations, CMMC scoping and readiness, SSPs, POA&Ms, evidence management, and supplier flow-downs.
  • Experience managing budgets, vendors, managed services, workforce plans, and multi-year transformation roadmaps.
  • Experience operating in a highly regulated, project-based, engineering, professional services, critical infrastructure, or similarly complex environment preferred.

Technical and Business Knowledge:

  • Working knowledge of modern enterprise architecture, cloud security, Zero Trust, identity and access management, data security, security operations, threat and vulnerability management, privacy-supporting controls, resilience, and secure software development.
  • Ability to interpret laws, regulations, standards, contractual clauses, and customer requirements and translate them into practical governance, control, evidence, and accountability models.
  • Ability to communicate technical and compliance issues in concise business language, including consequences, options, cost, and residual risk.

CERTIFICATIONS

One or more senior cybersecurity certifications such as CISSP, CISM, CCSP, CRISC or equivalent is strongly preferred. Additional credentials in cloud security, risk, privacy, secure software development, federal compliance, or CMMC assessment are advantageous.

Following an offer, candidates will be required to satisfactorily complete employment reference checks, verification of professional licensure and/or educational credentials, a motor vehicle report (MVR), and a comprehensive background check.

Move Forward with Kleinfelder:

Kleinfelder and its’ subsidiaries and affiliates, has been connecting great people to the best work since 1961. We are engineers, scientists, and construction professionals providing solutions that improve our clients’ transportation, water, energy, and other private infrastructure. As a responsive, cross-disciplinary team of bright, curious, and innovative problem-solvers, we are dedicated to doing the right thing, every day, on every project from over 110 offices in the US, Canada, and Australia. Connecting great people to the best work is our purpose – together, we deliver.

Progress with an Employer that Values You

Kleinfelder, and its’ subsidiaries and affiliates, is an inclusive organization free from discrimination. We are a stronger organization when we are a diverse workforce and believe that through diversity, equity, and inclusion comes creativity, innovation, and unity. We are proud to offer the following:

Benefits:

Kleinfelder, and its’ subsidiaries and affiliates, offers an excellent compensation and benefits package, including: medical, dental, vision, life insurance, 401(k) plan, and paid holidays. The expected salary range for the position is displayed in accordance with the State Pay Transparency Law. Final agreed upon compensation is based upon individual qualifications and experience. Salary Range: $182,548-$275,000.

Career Development:

We are committed to investing in the professional development of our staff, offering each employee every opportunity to grow, develop, and take control of their career paths. We support these efforts through reimbursements for continuing education as well as many of the expenses associated with trainings and certifications, and opportunities for career development through our internal Mentoring Program.

Equal Opportunity:

Kleinfelder, and its’ subsidiaries and affiliates, is an Equal Opportunity Employer – Minorities/Women/Disabled/Veterans. (Compliant with the new VEVRAA and Section 503 rules)

NOTICE TO THIRD PARTY AGENCIES

Please note that Kleinfelder, and its’ subsidiaries and affiliates, does not accept unsolicited resumes from recruiters or employment agencies. In the absence of a signed Recruitment Fee Agreement, Kleinfelder, and its’ subsidiaries and affiliates, will not consider or agree to payment for any referral compensation or recruiter fee. In the event a recruiter or agency submits a resume or candidate without a previously signed agreement, Kleinfelder, and its’ subsidiaries and affiliates, explicitly reserves the right to pursue and hire those candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resume, including those submitted to hiring managers, are deemed to be the property of Kleinfelder.

Ready to join the team?

Apply now