Remote Cybersecurity & Compliance Leader (vCISO)

Kinetix Technology Services, LLC; Colorado Springs (CO); À distance; USD 108 000 - 132 000; Plein temps

Résumé du poste

Kinetix Technology Services, LLC is seeking a remote-based Cybersecurity and Compliance Manager in the United States. You will lead compliance programs across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, while delivering vCISO services and executive risk reporting.

This role partners with clients, leadership, and operations to improve security maturity and ensure contractual obligations are met.

Qualifications

• 8+ years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.
• Active CISSP certification in good standing.
• Strong working knowledge of cybersecurity and compliance frameworks, including NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, and ISO 27001, with experience supporting audits, evidence management, and compliance assessments.
• Demonstrated experience conducting cybersecurity risk assessments, managing third-party and vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.
• Strong client-facing communication, analytical, and organizational skills, with the ability to advise executive stakeholders, manage multiple engagements, and evaluate security controls across Windows, macOS, cloud, networking, and identity environments.

Responsabilités

• Lead cybersecurity compliance initiatives across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.
• Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.
• Oversee the Security Program Platform and associated governance, risk, and compliance processes.
• Manage internal and client risk assessments, cyber insurance questionnaires and renewals, third-party risk management, and vendor security due diligence.
• Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive and board-level reporting.
• Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable-use policies, data protection, and emerging security risks.
• Maintain security policies, procedures, and audit-ready documentation while ensuring identified gaps are tracked through remediation.
• Oversee Cybersecurity Services delivery to ensure contractual security commitments are fulfilled and service gaps are addressed with clear accountability.
• Determine applicable cybersecurity deliverables across Essentials, Core, Enterprise, and Advanced service tiers based on client requirements, endpoint counts, compliance obligations, and risk profiles.
• Ensure consistent delivery of Cyber Posture Snapshots, Continuous Health Checks, managed remediation, NIST CSF maturity scoring, and annual security summaries.
• Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.
• Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.
• Collaborate with security operations teams on incident response, vulnerability management, and remediation activities, ensuring appropriate client communication and compliance follow-up.
• Support pre-sales engagements, cybersecurity service recommendations, and opportunities to expand client security programs.
• Oversee annual backup recovery testing and provide business continuity and disaster recovery guidance.
• Serve as the primary liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.
• Provide guidance, coaching, and potential direct leadership to Security & Compliance Analysts and Security Success Analysts as the team expands.

Connaissances

CISSP

NIST CSF

SOC 2

HIPAA

PCI-DSS

CMMC

ISO 27001

Vendor risk management

GRC platforms

Description du poste

Kinetix Technology Services, LLC is seeking a remote-based Cybersecurity and Compliance Manager in the United States. You will lead compliance programs across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, while delivering vCISO services and executive risk reporting.

This role partners with clients, leadership, and operations to improve security maturity and ensure contractual obligations are met.