5+ years in security, IT governance, or senior MSP technical consulting
Experience with compliance frameworks such as CIS Controls, NIST CSF, CMMC
Strong skills in documentation, policy writing, and executive presentations
Familiarity with MSP tools like Autotask PSA and IT Glue
Bachelor's degree in a related field or equivalent experience
Responsibilities
Develop and document strategic technology and security roadmaps for clients
Lead governance efforts including risk scoring and compliance gap analyses
Conduct client-facing roadmap meetings and executive briefings
Define and align policy templates to compliance frameworks
Collaborate with Account Executives to align roadmap priorities with client needs
Provide direction to teams regarding platform standards and policies
Maintain ownership of the alignment model and scoring rules
Identify and escalate systemic risk trends
Co-lead pre-sales technical discovery as needed
Contribute to internal documentation standards and training
Benefits
Opportunity to work independently from sales and account management
Focus on strategic technology and security direction
Collaborative environment with a focus on client success
Opportunity to lead and influence governance efforts
Exposure to various compliance frameworks and industry standards
Full Job Description
Position Summary The vCISO is a senior role responsible for developing and maintaining the strategic direction of client-facing technology, security, and governance frameworks. This role is accountable for defining standards, creating roadmaps, managing risk posture, and ensuring platform maturity across the client base. The vCISO operates independently from account management and sales, focusing on the alignment between client business goals and secure, supportable technical delivery.
Key Responsibilities
Develop and document long-term strategic technology and security roadmaps for assigned clients
Lead governance efforts including alignment scoring, risk scoring, compliance gap analysis, and platform health tracking
Deliver client-facing roadmap meetings and executive briefings
Define and maintain policy templates (Acceptable Use, BCDR, Incident Response, etc.) and align them to compliance frameworks (CIS, NIST CSF, CMMC, etc.)
Collaborate with Account Executives to align roadmap priorities with client budgets and business planning cycles
Provide authoritative direction to Project, Service Desk, and TAM functions regarding platform standards and policy adherence
Maintain ownership of the Framewerx alignment model, including scoring rules, standard definitions, and thresholds
Identify and escalate systemic risk trends across the client base
Lead or co-lead pre-sales technical discovery when strategic input is required
Contribute to internal enablement, including documentation standards and training
Collaboration and Escalation
Escalation point for ambiguity in standards, alignment scoring, or policy interpretation
Regular collaboration with Account Executives, TAMs, and Project Engineers to support aligned delivery
Liaison to compliance and security vendors where applicable
Performance Metrics
Client Alignment Score improvement across assigned portfolio
Roadmap milestone completion rate
Adoption rate of documented policies and technical standards
Reduction of unmanaged or noncompliant systems
Internal delivery team alignment with standards and decision logic
Frequency and quality of roadmap meetings completed on schedule
Qualifications
5+ years in security, IT governance, or senior MSP technical consulting
Demonstrated experience with compliance frameworks (CIS Controls, NIST CSF, CMMC)
Strong documentation, policy writing, and executive presentation skills
Familiarity with MSP tools: Autotask PSA, IT Glue, RMM platforms
Bachelor's degree in a related field or equivalent experience
