Senior Cybersecurity Compliance vCISO (Remote)

Jobgether; United States; On-site; USD 95,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Dental and vision coverage

Life insurance

Paid time off

Job summary

Jobgether (Partner Company) is seeking a Senior Cybersecurity Compliance Consultant in the United States. The role blends cybersecurity compliance consulting, risk management, and client-facing advisory responsibilities across diverse organizations.

You will lead high-impact engagements, develop remediation strategies, and guide clients through readiness and third-party assessment processes, acting as a trusted security advisor and vCISO.

Qualifications

• Active CISSP certification required at hire; CCP certification required at hire; CCA within 12 months.
• Eight+ years of progressive information security experience with at least three years delivering compliance or vCISO engagements.
• Proven experience in at least three frameworks (e.g., CMMC, NIST SP 800-171/53, HIPAA, SOC 2, PCI DSS).
• Ability to map control requirements across multiple frameworks and defend determinations to auditors/regulators.
• Experience with security monitoring tools and Microsoft security stack preferred.
• Familiarity with GRC platforms (IntelliGRC, Vanta, Secureframe, Drata, OneTrust) and evidence-collection workflows.
• Ability to manage 20–30 client engagements simultaneously with strong organization and communication skills.

Responsibilities

• Serve as the assigned security officer and vCISO for a portfolio of client organizations, leading recurring meetings and delivering updates, metrics, findings, and recommendations.
• Lead CMMC Level 1 and Level 2 readiness engagements and NIST SP 800-171 assessments, SSP development, and POA&M management.
• Advise clients on CUI scoping, DFARS/FAR requirements, and secure enclave architectures (including Microsoft GCC High).
• Deliver compliance engagements across HIPAA/HITECH, SOC 2, PCI DSS v4.0, GLBA, ISO/IEC 27001/27002, NIST CSF 2.0, SP 800-53, CIS Controls, NIST AI RMF, and ISO/IEC 27001/27701.
• Map control requirements across frameworks to create unified matrices and reduce duplicate evidence collection.
• Conduct risk assessments, identify threats, and recommend remediation actions to close gaps.
• Review security tooling outputs (Microsoft Defender XDR, Sentinel, Entra ID, Intune, Purview) and coordinate remediation with client teams.
• Support incident response activities and contribute to playbooks, SOC coordination, and post-incident reviews.

Skills

CMMC knowledge

NIST SP 800-171 experience

Regulatory compliance

Client-facing advisory

vCISO experience

Tools

IntelliGRC

Vanta

Secureframe

Drata

OneTrust

Microsoft Defender stack

Job description

Jobgether (Partner Company) is seeking a Senior Cybersecurity Compliance Consultant in the United States. The role blends cybersecurity compliance consulting, risk management, and client-facing advisory responsibilities across diverse organizations.

You will lead high-impact engagements, develop remediation strategies, and guide clients through readiness and third-party assessment processes, acting as a trusted security advisor and vCISO.