Remote Fractional CISO — Security Strategy & Compliance

Arcanys; United States; Remote; USD 165.000 - 248.000; Teilzeit

Zusammenfassung

Arcanys is seeking a Fractional CISO (vCISO) to lead security governance for a remote, distributed team. The role targets SOC 2 Type 2 and ISO 27001 compliance within a software outsourcing context.

You will drive cross-border compliance, incident and policy management, and vendor assessments while mentoring staff and communicating with non-technical stakeholders. Remote engagement is 20-30 hours/week.

Qualifikationen

• Experience leading security governance in mid-sized companies (200–500 employees).
• SOC 2 Type 2 or ISO 27001 certification required.
• Strong SDLC, CI/CD security, and cloud platforms (AWS, Google Workspace).
• Ability to explain security concepts to both junior technical staff and non-technical stakeholders.
• Experience with client security audits and vendor assessments.
• Experience working with distributed teams (Europe/Asia/Australia); startup exposure a plus.
• CISSP, CISM or CISA certifications preferred.

Aufgaben

• Develop security procedures and policies to meet SOC 2 Type 2 and ISO 27001 controls.
• Design a 12-month security roadmap balancing quality and agility.
• Establish a Risk Register and prioritize remediation by business impact.
• Ensure GDPR, Philippines Data Privacy Act and Australian Privacy Act compliance across regions.
• Standardize responses to client security questionnaires to accelerate sales.
• Draft and implement Incident Response, Access Control, and DR/BCP policies.
• Oversee selection and implementation of security tools (EDR, SIEM, scanners) without over-complicating the stack.

Kenntnisse

Security governance leadership

SOC 2 Type 2 / ISO 27001 certification

SDLC security

CI/CD security

Cloud platforms (AWS, Google Workspace

Security audits & vendor assessments

Communication & mentoring

Ausbildung

CISSP / CISM / CISA certifications

Tools

EDR

SIEM

Vulnerability Scanners

Jobbeschreibung

Arcanys is seeking a Fractional CISO (vCISO) to lead security governance for a remote, distributed team. The role targets SOC 2 Type 2 and ISO 27001 compliance within a software outsourcing context.

You will drive cross-border compliance, incident and policy management, and vendor assessments while mentoring staff and communicating with non-technical stakeholders. Remote engagement is 20-30 hours/week.