Virtual Chief Information Security Officer (vCISO)

About the role

The Virtual Chief Information Security Officer (vCISO) will provide strategic oversight of our security program, ensuring the protection of systems and infrastructure while supporting governance, risk, and compliance initiatives. This remote leadership role combines policy development, technical guidance, and audit support for frameworks such as SOC 2 Type II, HIPAA, and PCI.

Key responsibilities

• Develop, implement, and maintain cyber security policies, procedures, and standards.
• Conduct risk assessments, identify threats, and work with stakeholders to mitigate security risks.
• Ensure compliance with regulatory requirements and industry standards, and assist in audit preparation.
• Integrate security controls into system design, perform architecture reviews, and lead penetration testing and vulnerability assessments.
• Support incident response planning, investigations, root‑cause analysis, and proactive security monitoring.
• Stay current with emerging threats, technologies, and best practices to continuously improve security engineering.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Proven experience as a Cyber Security Engineer, Security Analyst, or similar senior security role.
• Strong understanding of cyber security principles, risk management methodologies, and compliance frameworks.
• Familiarity with regulatory requirements such as GDPR and HIPAA, and standards like NIST and ISO 27001.
• Experience interpreting and applying frameworks such as NIST CSF, HIPAA HITRUST, CIS 20, and CSA CSF.
• Background in system security engineering, secure software development, or secure system design.

Required skills

• Firewalls
• Intrusion detection/prevention systems (IDS/IPS)
• Security Information and Event Management (SIEM) tools
• Vulnerability scanning tools
• Penetration testing
• Security architecture reviews
• NIST Cybersecurity Framework (CSF)
• HIPAA HITRUST
• CIS 20 controls
• CSA Cloud Security Framework
• GDPR compliance
• HIPAA compliance
• NIST standards
• ISO 27001
• COBIT
• ITIL