Information Security Consultant

Hatch IT; United States; Remote; USD 180,000 - 230,000; Full time

Job summary

A cybersecurity firm is seeking a Senior Virtual Information Security Officer to provide CISO-level advisory services. In this non-implementational role, you'll guide strategy, mentor Virtual ISOs, oversee deliverables, and communicate effectively with client executives. Strong expertise in NIST frameworks and prior consulting experience are essential. The position promises a dynamic work environment emphasizing security leadership and client trust, suitable for experienced professionals looking to contribute to strategic direction.

Qualifications

• Strong experience with NIST frameworks (800-53, 800-171, CSF).
• SEC 530 familiarity (Virginia Information Security Standard) strongly preferred.
• Prior consulting or advisory experience.
• Ability to communicate confidently with executives and boards.
• Excellent writing and documentation skills.
• Technical literacy sufficient to advise on controls (without implementing).

Responsibilities

• Provide CISO-level advisory guidance to clients.
• Oversee and mentor Virtual ISOs delivering GRC work.
• Review deliverables for accuracy and completeness.
• Act as a senior escalation point for complex client questions.
• Translate regulatory and technical requirements into practical guidance.
• Support scope expansion conversations with clients.
• Help evolve GRC methodologies and service offerings.

Skills

Strong experience with NIST frameworks

SEC 530 familiarity

Prior consulting or advisory experience

Ability to communicate confidently with executives

Excellent writing and documentation skills

Technical literacy sufficient to advise on controls

Tools

Trastero

Job description

hatch IT is partnering with Assura to find a Senior Virtual Information Security Officer (Senior VISO). Please see details below:

About the Company

Assura is a cybersecurity firm with nearly 20 years of singular focus on information security. We work primarily with state, local, and education (SLED) organizations that need real-world, practical security leadership — not checkbox compliance or theoretical frameworks. Our team is made up of career cybersecurity practitioners, not career consultants. We take the work seriously, but not ourselves. People stay here because they’re supported, trusted, and given room to grow.

About the Role

The Senior Virtual Information Security Officer (Senior VISO) is a CISO-level advisor who ensures the quality, consistency, and strategic direction of Assura’s GRC engagements. This is not a hands‑on implementation role and not a people‑management role (today). Think of this position as similar to a consulting engagement partner:

• You guide strategy
• You oversee quality
• You mentor and support VISOs
• You build client confidence at the executive level

Responsibilities:

• Provide CISO-level advisory guidance to Assura clients
• Oversee and mentor Virtual ISOs (VISOs) delivering day-to-day GRC work
• Review deliverables for accuracy, completeness, and real-world applicability
• Act as a senior escalation point for complex client questions
• Translate regulatory and technical requirements into clear, practical guidance
• Support scope expansion conversations when new client needs emerge
• Help evolve Assura’s GRC methodologies, templates, and service offerings

Qualifications:

• Strong experience with NIST frameworks (800-53, 800-171, CSF)
• SEC 530 familiarity (Virginia Information Security Standard) strongly preferred
• Prior consulting or advisory experience
• Ability to communicate confidently with executives and boards
• Excellent writing and documentation skills
• Technical literacy sufficient to advise on controls (without implementing)

Required Skills:

• Strong experience with NIST frameworks (800-53, 800-171, CSF)
• SEC 530 familiarity (Virginia Information Security Standard) strongly preferred
• Prior consulting or advisory experience
• Ability to communicate confidently with executives and boards
• Excellent writing and documentation skills
• Technical literacy sufficient to advise on controls (without implementing)

Preferred Skills:

• ISO, HIPAA, PCI exposure
• SLED experience outside Virginia
• Familiarity with GRC tools (e.g., Trastero)
• Experience mentoring junior practitioners

Equal Opportunity Statement

Assura is committed to diversity and inclusivity in the workplace.