Remote vCISO - Cybersecurity Strategy Lead

ISOutsource; Oregon; Hybrid; USD 155,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Salary range 155k-210k

Quarterly bonuses

Comprehensive benefits

401(k) matching

Paid time off

Mileage reimbursement

Snacks and beverages

Team activities

Job summary

ISOutsource is seeking an experienced virtual Chief Information Security Officer (vCISO) to guide clients in building strong cybersecurity programs. You will act as a trusted advisor to client leadership, shaping strategy, governance, risk management, and regulatory compliance across frameworks such as NIST CSF, HIPAA, PCI DSS, and SOC 2.

This client-facing role requires eight+ years of cybersecurity leadership, the ability to deliver executive updates, and travel to client sites.

Qualifications

• Bachelor's Degree in tech field or equivalent experience.
• Minimum 8 years in cybersecurity, risk management, or IT leadership.
• Valid driver's license and ability to travel locally.
• Experience with SMB/mid-market or MSP clients preferred.

Responsibilities

• Provide executive-level cybersecurity consulting to clients.
• Develop and manage cybersecurity roadmaps and ISMS.
• Lead governance, risk assessments, and remediation priorities.
• Guide compliance with NIST, CMMC, HIPAA, PCI DSS, SOC 2.
• Support audit readiness and attestations.
• Advise on vulnerability management and third-party risk.
• Lead incident response planning and tabletop exercises.
• Present cybersecurity updates to client leadership.
• Partner with internal and client teams to enact strategy.
• Maintain awareness of emerging threats and best practices.

Skills

Cybersecurity strategy

GRC governance

NIST CSF

NIST 800-53/800-171

HIPAA

PCI DSS

SOC 2

Risk assessment

Incident response

Executive reporting

Client relationship

Leadership

Education

Bachelor's Degree in technology field or equivalent

Certifications/education equivalent

Job description

ISOutsource is seeking an experienced virtual Chief Information Security Officer (vCISO) to guide clients in building strong cybersecurity programs. You will act as a trusted advisor to client leadership, shaping strategy, governance, risk management, and regulatory compliance across frameworks such as NIST CSF, HIPAA, PCI DSS, and SOC 2.

This client-facing role requires eight+ years of cybersecurity leadership, the ability to deliver executive updates, and travel to client sites.