Chief Information Security Officer at DLA Piper, Short Hills NJ

DLA Piper is seeking a Chief Information Security Officer to lead its enterprise information security and cyber risk program from the firm's Short Hills, NJ office. This full-time executive role is responsible for protecting the firm's clients, people, data, reputation, and global business operations through a mature, business-aligned security strategy.

Chief Information Security Officer at DLA Piper: Strategic Overview

The CISO sets the strategic direction for the firm's Information Security Management System, security governance, risk management, incident response, third-party security, data protection, and security awareness programs. Operating as a trusted advisor to firm leadership, the Office of General Counsel, Information Technology, Information Governance, Risk Management, practice leadership, and global counterparts, this executive ensures the confidentiality, integrity, and availability of client and firm information.

The role demands a business-aligned approach that enables innovation, responsible AI adoption, operational resilience, and exceptional client service. The CISO works closely with—but independently from—the Information Technology function, providing objective risk oversight, policy leadership, executive reporting, and continuous improvement of the firm's security posture.

Core Responsibilities

• Strategic Leadership: Set and execute the enterprise information security strategy, aligning cyber risk management with firm strategy, client obligations, professional responsibility requirements, regulatory expectations, and operational resilience objectives.
• Governance and Oversight: Lead the Information Security Management System and security governance framework, including policy development, risk assessment, control monitoring, executive reporting, audit readiness, certification support, and continuous improvement.
• Incident Response: Serve as the senior incident response leader for security events, ensuring prompt triage, containment, investigation, evidence preservation, root‑cause analysis, remediation, and coordination with the Office of General Counsel, firm leadership, insurers, regulators, law enforcement, vendors, and affected clients when required.
• Cross‑Functional Partnership: Partner with executive leadership, AI Innovation, AI Governance, Information Governance, Risk Management, Privacy, Procurement, Finance, Human Resources, practice leaders, and global counterparts to embed security‑by‑design into firm operations, technology investments, client service delivery, and major transformation initiatives.
• Executive Risk Advisory: Provide objective cyber risk advice to firm leadership and governance bodies, translating complex technical risk into clear business, legal, reputational, operational, and client‑impact terms that enable timely decision‑making.
• Enterprise Risk Management: Oversee cyber risk identification, assessment, treatment, acceptance, and reporting across vulnerabilities, threat intelligence, identity and access risk, cloud and infrastructure security, application security, data loss prevention, endpoint protection, email security, and ransomware preparedness.

Desired Qualifications and Experience

Candidates should possess deep technical expertise in zero‑trust architecture, cloud security, and cyber defense, with proven ability to leverage frameworks such as NIST. The ideal professional will have experience in a global law firm, financial services institution, or similarly complex setting, with progressive leadership in information security or enterprise risk management.

Executive‑level knowledge of governance, compliance, data protection, threat intelligence, and AI governance is expected. Familiarity with ISO/IEC 27001, CIS Controls, and data privacy laws is highly preferred. Relevant certifications such as CISSP, CISM, CCISO, or CRISC significantly strengthen a candidacy.

Location and Work Arrangement

This position can sit in DLA Piper's Atlanta, Baltimore, Boston, Miami, New York, Northern Virginia, Philadelphia, Raleigh, Short Hills, Washington D.C., or Wilmington office. Candidates must reside within a reasonable commuting distance of their assigned office and be available for periodic travel.

Application Guidance for IT Security Professionals in the Legal Sector

• Highlight Legal Sector Acumen: Emphasize any background handling privilege‑sensitive data, managing ethical walls, or complying with outside counsel guidelines. Law firms face unique regulatory and confidentiality pressures that differ from other industries.
• Showcase AI Governance Experience: DLA Piper is actively integrating AI technologies. If you have experience building secure AI pipelines or implementing AI governance frameworks, make this a focal point of your executive summary.
• Emphasize Board‑Level Communication: In a partner‑led law firm, translating technical risk into business and legal impact is critical. Provide concrete examples of executive briefings or risk narratives delivered to managing partners or governance boards.
• Leverage Professional Networks: Beyond applying directly, ensure your LinkedIn profile reflects your CISO capabilities, as senior legal and IT executives are frequently sourced through specialized executive search platforms.

This is a rare opportunity to lead enterprise security at a firm where bold, collaborative, and supportive values drive meaningful work. Interested professionals should ensure their application materials reflect both technical depth and the executive presence required for this high‑impact role.