Fractional CISO for Enterprise Security & Compliance

Reflexion; United States; Remote; USD 207,000 - 413,000; Part time

Job summary

Reflexion is seeking a highly skilled fractional CISO to lead the information-security attestations and risk program for an enterprise deal. This executive role focuses on validation, signing, and representation of security commitments.

You will work directly with the CEO and CTO to verify controls, coordinate audits, and guide SOC 2 readiness and ISO 27001 mappings in a remote, part-time engagement.

Qualifications

• Prior CISO / vCISO with enterprise vendor-risk experience
• Experience mapping ISO 27001 / NIST CSF and readiness for SOC 2
• Comfort signing SoAs and risk assessments and answering customer audits
• Technical proficiency in AWS + Cloudflare stack
• Knowledge of HIPAA applicability and GDPR obligations

Responsibilities

• Review and harden SoA and evidence package mapped to ISO 27001 / NIST CSF
• Sign risk assessments and be named security officer
• Join 2-3 customer security-diligence calls with CEO
• Verify controls with CTO and manage gap triage
• Scope SOC 2 Type I path if needed and manage auditor selection
• Scope and manage first external penetration test and triage findings
• Quarterly compliance calendar reviews and annual attestation support
• Incident readiness review of breach-notification runbook
• Advise on changes in deals that affect posture vs. negotiable items

Skills

Vendor-risk management

ISO 27001 mapping

NIST CSF mapping

SOC 2 readiness

Attestation & signing

Executive communication

Threat and risk assessment

Tools

AWS

Cloudflare

IAM

KMS

CloudTrail

Job description

Reflexion is seeking a highly skilled fractional CISO to lead the information-security attestations and risk program for an enterprise deal. This executive role focuses on validation, signing, and representation of security commitments.

You will work directly with the CEO and CTO to verify controls, coordinate audits, and guide SOC 2 readiness and ISO 27001 mappings in a remote, part-time engagement.