Virtual Chief Information Security Officer (vCISO)
Core
Client-facing security leader providing hands-on advisory, governance alignment, and gap analysis for mid-market organizations unable to retain a full-time CISO.
Role type
Senior IC Virtual Chief Information Security Officer (vCISO)
Builds
Security strategies, roadmaps, governance frameworks, and remediation plans for mid-market clients.
Domain
Cybersecurity, Cloud Security, Identity & Access Management, AI Governance
Deliverable
Production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Strategic security program management, Identity-first security (PIM/PAM/conditional access), Cloud posture management (CSPM/SSPM), Incident response planning, Ransomware resilience planning, Third-party risk management, AI governance policy, Gap analysis against security frameworks
Preferred skills
Prior CISO or deputy CISO experience, CMMC 2.0 expertise, Advanced AI governance implementation
Technologies
Microsoft 365, Azure, AWS, Google Cloud, NIST CSF 2.0, ISO 27001:2022, CMMC 2.0, SOC 2, HIPAA, PCI DSS 4.0
Responsibilities
Own the security program strategy and roadmap for assigned clients, Lead identity-first security implementation and management, Drive cloud posture assessment and remediation across major providers, Set direction for detection and response capabilities, Guide ransomware resilience and recovery drill planning, Lead AI governance and secure adoption of generative AI tools
Seniority
Senior, hands-on IC with leadership experience