Remote Cybersecurity & Compliance Leader (vCISO)

Kinetix Technology Services, LLC; Rhode Island; À distance; USD 140 000 - 210 000; Plein temps

Avantages offerts par ce poste

Health benefits

401(k) with employer match

Learning & development support

Flexible work options

Résumé du poste

Kinetix Technology Services, LLC is seeking a Cybersecurity and Compliance Manager for a remote, United States-based role. You will lead cybersecurity compliance programs across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, while providing vCISO advisory services and executive-level risk reporting.

You will collaborate with clients, security operations, and internal analysts to strengthen security programs, manage third-party risk, and guide AI governance initiatives.

Qualifications

• 8+ years of experience in information technology, cybersecurity, information security governance, risk management, or regulatory compliance.
• Strong working knowledge of cybersecurity and compliance frameworks, including NIST CSF, CIS Controls, SOC 2, HIPAA, PCI-DSS, CMMC, and ISO 27001, with experience supporting audits, evidence management, and compliance assessments.
• Demonstrated experience conducting cybersecurity risk assessments, managing third-party and vendor risk, supporting cyber insurance assessments, and using GRC or compliance automation platforms.
• Strong client-facing communication, analytical, and organizational skills, with the ability to advise executive stakeholders, manage multiple engagements, and evaluate security controls across Windows, macOS, cloud, networking, and identity environments.
• Additional professional certifications such as CISM, CISA, or other relevant cybersecurity and compliance credentials.
• Previous leadership experience managing teams, projects, client engagements, or cybersecurity advisory programs.
• Experience working in a managed service provider (MSP), managed security service provider (MSSP), or consulting environment delivering vCISO or cybersecurity advisory services.
• Experience with security operations, incident response, vulnerability management, SIEM platforms, and endpoint security technologies.
• Familiarity with CrowdStrike, ThreatLocker, Cisco Secure Connect, Cisco Meraki, OpenDNS, Jamf MDM, Microsoft Intune, Azure, OneLogin, and Okta.
• Experience with AI governance, security policies, and emerging AI-related risks, along with a bachelor's degree in Information Security, Information Technology, or a related field, or equivalent professional experience.
• Strategic thinker who can balance long-term cybersecurity planning with hands-on execution.
• Passionate about technology, cybersecurity, and continuous improvement.

Responsabilités

• Lead cybersecurity compliance initiatives, including risk assessments, policy development, audit preparation, evidence collection, and ongoing compliance monitoring across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001.
• Conduct compliance gap assessments, framework crosswalks, maturity evaluations, and remediation tracking to strengthen client security programs.
• Oversee the Security Program Platform and associated governance, risk, and compliance processes.
• Provide vCISO advisory services, including security strategy, roadmaps, investment planning, and executive and board-level reporting.
• Guide clients and internal stakeholders on responsible AI adoption, including AI governance, acceptable-use policies, data protection, and emerging security risks.
• Maintain security policies, procedures, and audit-ready documentation while ensuring identified gaps are tracked through remediation.
• Lead executive client strategy meetings and serve as the escalation point for complex cybersecurity, compliance, and risk management concerns.
• Communicate security findings, business risks, remediation priorities, and strategic recommendations to technical and nontechnical stakeholders.
• Collaborate with security operations teams on incident response, vulnerability management, and remediation activities, ensuring appropriate client communication and compliance follow-up.
• Support pre-sales engagements, cybersecurity service recommendations, and opportunities to expand client security programs.
• Oversee annual backup recovery testing and provide business continuity and disaster recovery guidance.
• Serve as the primary liaison between Cyber74 and Kinetix on cybersecurity and compliance guidance.
• Provide guidance, coaching, and potential direct leadership to Security & Compliance Analysts and Security Success Analysts as the team expands.

Connaissances

Cybersecurity governance

Risk management

Compliance programs

Client-facing leadership

Executive reporting

Incident response

Vendor risk management

Audit readiness

GRC platforms

Formation

Bachelor's degree in Information Security

Outils

CrowdStrike

Cisco Secure Connect

Microsoft Intune

Azure

Okta

Jamf MDM

Description du poste

Kinetix Technology Services, LLC is seeking a Cybersecurity and Compliance Manager for a remote, United States-based role. You will lead cybersecurity compliance programs across NIST CSF, SOC 2, CIS Controls, HIPAA, PCI-DSS, CMMC, and ISO 27001, while providing vCISO advisory services and executive-level risk reporting.

You will collaborate with clients, security operations, and internal analysts to strengthen security programs, manage third-party risk, and guide AI governance initiatives.