Position SummaryThe vCISO is a senior role responsible for developing and maintaining the strategic direction of client-facing technology, security, and governance frameworks. This role is accountable for defining standards, creating roadmaps, managing risk posture, and ensuring platform maturity across the client base. The vCISO operates independently from account management and sales, focusing on the alignment between client business goals and secure, supportable technical delivery.
Key Responsibilities- Develop and document long-term strategic technology and security roadmaps for assigned clients
- Lead governance efforts including alignment scoring, risk scoring, compliance gap analysis, and platform health tracking
- Deliver client-facing roadmap meetings and executive briefings
- Define and maintain policy templates (Acceptable Use, BCDR, Incident Response, etc.) and align them to compliance frameworks (CIS, NIST CSF, CMMC, etc.)
- Collaborate with Account Executives to align roadmap priorities with client budgets and business planning cycles
- Provide authoritative direction to Project, Service Desk, and TAM functions regarding platform standards and policy adherence
- Maintain ownership of the Framewerx alignment model, including scoring rules, standard definitions, and thresholds
- Identify and escalate systemic risk trends across the client base
- Lead or co-lead pre-sales technical discovery when strategic input is required
- Contribute to internal enablement, including documentation standards and training
Collaboration and Escalation- Escalation point for ambiguity in standards, alignment scoring, or policy interpretation
- Regular collaboration with Account Executives, TAMs, and Project Engineers to support aligned delivery
- Liaison to compliance and security vendors where applicable
Performance Metrics- Client Alignment Score improvement across assigned portfolio
- Roadmap milestone completion rate
- Adoption rate of documented policies and technical standards
- Reduction of unmanaged or noncompliant systems
- Internal delivery team alignment with standards and decision logic
- Frequency and quality of roadmap meetings completed on schedule
Qualifications- 5+ years in security, IT governance, or senior MSP technical consulting
- Demonstrated experience with compliance frameworks (CIS Controls, NIST CSF, CMMC)
- Strong documentation, policy writing, and executive presentation skills
- Familiarity with MSP tools: Autotask PSA, IT Glue, RMM platforms
- Bachelor's degree in a related field or equivalent experience
Preferred Certifications- CISSP, CISM, CISA, or equivalent
