Role Overview:
An experienced Virtual Chief Information Security Officer (vCISO) is sought to lead enterprise-wide cybersecurity strategy, compliance, and risk management initiatives. Acting as a senior advisor to executive leadership, the vCISO will drive cyber governance, regulatory compliance, and oversight of cybersecurity programs and incident response capabilities.
Key Responsibilities:
•Develop, maintain, and communicate a comprehensive cybersecurity strategy aligned with business and regulatory needs.
•Ensure organizational compliance with key federal, state, and industry cybersecurity regulations (e.g., FISMA, NIST, HIPAA, PCI-DSS).
•Lead incident response planning, business continuity, and disaster recovery initiatives.
•Oversee audit processes and serve as a point of contact for regulatory bodies and third-party assessors.
•Provide strategic cybersecurity guidance to executive teams, including CTO and board members.
Required Experience:
•Minimum 10 years of leadership experience in information security or cybersecurity governance.
•Deep understanding of public sector cybersecurity frameworks and initiatives.
•Proven track record of managing audits, achieving regulatory compliance, and building security programs from the ground up.
Required Certifications (Any of the following):
•CISSP – Certified Information Systems Security Professional
•CISM – Certified Information Security Manager
•CISA – Certified Information Systems Auditor
•CASP+ – CompTIA Advanced Security Practitioner
Compliance & Regulatory Knowledge:
•NIST frameworks: 800-53, 800-171, 800-61
•FISMA – Federal Information Security Management Act
•HIPAA – Health Insurance Portability and Accountability Act
•PCI-DSS – Payment Card Industry Data Security Standard
•ISO 27001 – International Information Security Standard
•CJIS – Criminal Justice Information Services compliance
Job Type: Contract
Pay: $110.00 - $120.00 per hour
Expected hours: 40 per week
Schedule:
Work Location: In person