Remote Cybersecurity & Compliance Leader (vCISO)

Kinetix Technology Services, LLC; New Mexico; Remote; USD 108,000 - 132,000; Full time

Job summary

Kinetix Technology Services, LLC is seeking a Cybersecurity and Compliance Manager for a remote United States-based role. Lead cybersecurity compliance programs, risk management initiatives, and strategic security advisory services for clients.

You will guide and coach the security team, manage audits, third-party risk, and provide vCISO services, reporting to executives and boards. Requires CISSP and deep knowledge of NIST CSF, SOC 2, HIPAA, PCI-DSS, CMMC, ISO 27001.

Qualifications

• 8+ years of experience in IT, cybersecurity, governance, risk or regulatory compliance.
• Active CISSP certification in good standing.
• Strong knowledge of NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, ISO 27001.
• Experience conducting risk assessments, third-party risk, and cyber insurance assessments.
• Ability to translate risks into actionable recommendations for executives.
• Excellent client-facing communication and stakeholder management.
• Experience with GRC automation platforms.

Responsibilities

• Lead cybersecurity compliance initiatives across multiple frameworks.
• Oversee risk assessments, policy development, and evidence collection.
• Manage third-party risk and vendor due diligence.
• Provide vCISO advisory services and executive reporting.
• Guide AI governance and data protection in client engagements.
• Ensure audit-ready documentation and remediation tracking.
• Lead and coach Security & Compliance Analysts as the team grows.

Skills

CISSP

Client communication

GRC expertise

Risk assessment

Executive reporting

Tools

GRC platforms

Job description

Kinetix Technology Services, LLC is seeking a Cybersecurity and Compliance Manager for a remote United States-based role. Lead cybersecurity compliance programs, risk management initiatives, and strategic security advisory services for clients.

You will guide and coach the security team, manage audits, third-party risk, and provide vCISO services, reporting to executives and boards. Requires CISSP and deep knowledge of NIST CSF, SOC 2, HIPAA, PCI-DSS, CMMC, ISO 27001.