Virtual Chief Information Security Officer (vCISO)

Role & responsibilities:

• Develop, implement, and continuously improve our a comprehensive security program that includes cyber defense, data protection, and security operations.
• Conduct risk assessments, identify vulnerabilities, and prioritize remediation efforts to reduce risk exposure.
• Oversee security incident detection, response, and recovery, ensuring swift mitigation of potential breaches.
• Manage the security architecture, tools, and technologies deployed across the organizations IT infrastructure.
• Coordinate with legal, compliance, and regulatory teams to ensure compliance with data protection and privacy laws, such as GDPR, CCPA, and HIPAA.
• Monitor security metrics and report on the organizations security posture to executive leadership.
• Lead security awareness training programs for employees to promote a culture of cybersecurity across the organization.
• Stay updated on cybersecurity trends, technologies, and best practices to enhance security measures proactively.

Preferred candidate profile:

• Bachelors degree in Information Security, Computer Science, or a related field.
• 10+ years of demonstrable experience as a Chief Information Security Officer or in a similar senior-level cybersecurity role.
• Extensive knowledge of information security principles, cybersecurity frameworks (e.g., NIST, ISO 27001), and risk management practices.
• Working knowledge of security auditing, vulnerability assessments, and risk mitigation.
• Experience with security technologies such as firewalls, intrusion detection systems, SIEMs, and encryption protocols.
• Solid knowledge of data privacy regulations and compliance requirements.
• Ability to develop and implement complex security strategies.
• Strong leadership and communication skills, with the ability to influence decision-making at the executive level, as well as to keep stakeholders apprised on status of their requests and tickets.
• Strong analytical and problem-solving skills with a keen eye for identifying potential risks and vulnerabilities.