Chief Information Security Officer

ABOUT THE TEAM

The Information Security team is responsible for protecting Anduril's most critical digital assets, including our networks, systems, data, and intellectual property, against the full spectrum of cyber threats, from nation-state adversaries to insider risk. As one of the fastest growing defense technology companies in the world, Information Security defends a global footprint spanning 70+ sites, securing thousands of devices and endpoints supporting more than 10,000 employees across classified and unclassified environments. Our team sits at the intersection of cybersecurity, engineering, and compliance, partnering closely with every division at Anduril to ensure our security posture scales as fast as our mission.

ABOUT THE JOB

We are looking for a Chief Information Security Officer (CISO) to build and lead a modern, engineering-driven information security organization. Reporting to the Chief Information Officer, you will own Anduril's information security posture end-to-end, spanning Information Security, Network Engineering & Infrastructure, IT, and Cyber Compliance. You will serve as a key strategic partner to our Chief Security Officer to ensure seamless defense across the cyber, physical, and human domains. This role demands a leader who can operate at the speed of a high-growth defense technology company, making pragmatic, risk-based decisions that enable rapid product delivery while ensuring uncompromising protection of our digital assets, networks, and data.

WHAT YOU'LL DO

• Develop and Execute an Information Security Strategy: Design and implement a comprehensive strategy to protect Anduril's networks, systems, data, and intellectual property against the full spectrum of cyber threats, from nation-state adversaries to insider risk.
• Lead a Unified Information Security Organization: Build and lead a high-performing organization spanning Information Security, Network Engineering & Infrastructure, IT, and Cyber Compliance into a cohesive function structured around business outcomes, not traditional silos.
• Partner with the Chief Information Officer: Work as a key strategic partner to the CIO to ensure core engineering functions across InfoSec, IT, Infrastructure Engineering enable the enterprise to scale.
• Partner with the Chief Security Officer: Work as a key strategic partner to the CSO to ensure a seamless security posture that fuses cyber, physical, and human-domain protections across the enterprise.
• Drive Threat Detection and Response: Own the organization's ability to detect, investigate, and respond to cyber incidents and intrusions at speed, ensuring operational resilience across classified and unclassified environments.
• Own Cyber Risk Management: Implement a dynamic risk management framework that continuously assesses and prioritizes cyber threats across all divisions, networks, and environments. Provide clear, actionable intelligence on risk exposure to executive leadership.
• Ensure Global Cyber Compliance: Guarantee compliance with all applicable cybersecurity frameworks and US Government contractual obligations, including NIST 800-171, CMMC, ISO 27001, FedRAMP, and DoD-specific requirements. Serve as the primary senior liaison to government partners on all cybersecurity matters.
• Build an Engineering-First Security Culture: Champion an approach to security that is deeply technical, automation-forward, and rooted in engineering principles, not checkbox compliance. Embed security into the software development lifecycle and infrastructure as a first-class concern.
• Secure the Enterprise at Scale: Ensure the security and reliability of corporate IT, network infrastructure, and endpoint environments across a rapidly expanding global footprint of offices, manufacturing facilities, and test sites.
• Operational Effectiveness:Drive quantifiable outcomes across the security organization through clear initiatives, metrics, and accountability.

REQUIRED QUALIFICATIONS

• 15+ years of progressive leadership experience in information security, cybersecurity, or related technical disciplines.
• Proven experience as a CISO or in a comparable senior cybersecurity leadership role at a technology or defense company, OR extensive experience in a senior cyber leadership role within the military or intelligence community.
• Deep technical expertise across core information security disciplines: network security, application security, security operations, incident response, identity and access management, and cloud security.
• Demonstrated success building, leading, and mentoring high-performing, cross-functional security and IT teams in a fast-paced environment.
• Strong understanding of government cybersecurity frameworks and compliance requirements (NIST 800-171, CMMC, FedRAMP, FISMA, DFARS).
• Currently possess or is eligible to obtain and maintain an active U.S. Top Secret SCI security clearance.

PREFERRED QUALIFICATIONS

• Experience securing complex environments that span classified and unclassified networks, hardware R&D, manufacturing, and global test sites.
• Experience in a high-growth, venture-backed technology company.
• A pragmatic, first-principles approach to security that prioritizes risk and impact over rigid, compliance-only frameworks.
• Hands-on technical background in software engineering, systems engineering, or infrastructure, not exclusively a governance/policy career path.
• Experience building security programs that embed into engineering workflows (CI/CD pipeline security, infrastructure-as-code, zero trust architecture).