**Location Requirement: We are only considering candidates who are currently located in Washington, Oregon, Idaho, Colorado, Florida, North Carolina, Texas, or Arizona, or who are willing to relocate to one of these states. If you do not currently reside in one of these states and are not willing to relocate, please do not apply.
We9re looking for an experienced Virtual Chief Information Security Officer (vCISO) to help our clients build stronger, smarter cybersecurity programs.
As a vCISO, you9ll serve as a trusted advisor to client leadership, helping turn complex security, risk, and compliance needs into practical strategies and clear roadmaps. You9ll guide cybersecurity planning, governance, risk management, and compliance while helping clients continuously improve their security posture.
You9ll also collaborate across ISOutsource on cybersecurity assessments, GRC initiatives, Sales Engineering opportunities, and strategic conversations with clients and prospects.
Work you will do as an ISOutsource vCISO:
- Provide executive-level cybersecurity consulting and strategic guidance to clients.
- Develop and manage cybersecurity roadmaps, security programs, and Information Security Management Systems (ISMS).
- Lead cybersecurity governance, risk assessments, gap analyses, risk registers, remediation priorities, and security steering committee discussions.
- Guide clients through regulatory, contractual, and framework requirements, including NIST, CMMC, HIPAA, PCI DSS, SOC 2, cyber insurance, and other applicable standards.
- Support audit readiness, compliance assessments, cybersecurity questionnaires, and annual attestations.
- Advise on vulnerability management, third-party risk, privileged access, and other security posture improvement initiatives.
- Lead incident response planning, tabletop exercises, emerging-threat response, and provide strategic guidance during cybersecurity incidents.
- Prepare and present cybersecurity program updates, trends, risks, priorities, and recommendations to client leadership.
- Partner with internal technical and client-facing teams to turn cybersecurity strategy into action.
- Support cybersecurity assessments, proposals, Sales Engineering opportunities, and strategic engagements with clients and prospects.
- Build strong relationships with client executives, business leaders, auditors, and key stakeholders.
- Stay current on emerging threats, cybersecurity technologies, regulatory changes, and industry best practices.
- Meet established revenue, utilization, client satisfaction, documentation, and organizational goals, including timely daily time entry.
- Perform other duties as assigned.
Our ideal candidate will possess the following qualities:
- A passion for customer service
- Strong time management skills
- Excellent communication skills (both technical and non-technical)
- Track records of Customer Loyalty and Exemplary Service.
- Demonstration of the ability to communicate effectively with non-technical decision makers
Highly sought-after experience and skill includes:
- Experience designing, implementing, managing, or maturing cybersecurity programs.
- Strong knowledge of cybersecurity governance, risk management, compliance, incident response, vulnerability management, and security program practices.
- Experience with cybersecurity and compliance frameworks such as NIST CSF, NIST 800-53/800-171, CIS Controls, CMMC, HIPAA, PCI DSS, and SOC 2.
- Experience supporting cybersecurity assessments, audits, compliance readiness, third-party reviews, and remediation efforts.
- Ability to develop strategic cybersecurity roadmaps, risk registers, executive reporting, and prioritized improvement plans.
- Proven ability to translate cybersecurity risks and technical concepts into clear business recommendations for executive and non-technical audiences.
- Strong consulting, presentation, facilitation, documentation, and client relationship skills.
Additional experience we look for includes:
- Experience working with SMB, mid-market, or Managed Service Provider clients is preferred.
- Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent are preferred.
Requirements:
- Bachelor9s Degree (B.A./B.S.) from four-year college or university in a technology based field, or comparable certifications/education or equivalent field experience.
- Minimum of 8 years of progressive experience in cybersecurity, risk management, compliance, security operations, or information technology leadership.
- Valid driver9s license with insurance
- Some local travel to and from clients is required
