Senior vCISO: Cybersecurity Strategy & Risk Leader

ISOutsource; Central City (CO); Hybrid; USD 155,000 - 210,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability coverage

401(k) match

Paid time off

Parking reimbursement

Monthly team activities

Job summary

ISOutsource is seeking an experienced virtual Chief Information Security Officer (vCISO) to guide client cybersecurity programs across the Western United States. The role focuses on governance, risk management, and compliance with standards such as NIST, CMMC, HIPAA, and SOC 2.

You will work with senior leadership to translate security into business outcomes. You will manage roadmaps, ISMS, and security programs while collaborating with internal teams and client executives to drive improvement

Qualifications

• Bachelor's degree and 8+ years of cybersecurity, risk management, or IT leadership experience.
• Preferred certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent.
• Valid driver's license and ability to travel to client sites locally.

Responsibilities

• Provide executive-level cybersecurity consulting and strategic guidance to clients.
• Develop and manage cybersecurity roadmaps, ISMS, and governance programs.
• Lead risk assessments, gap analyses, and assurance activities with stakeholders.
• Guide regulatory and framework compliance (NIST, CMMC, HIPAA, PCI DSS, SOC 2).
• Support audits, attestations, third-party reviews, and contract readiness.
• Lead incident response planning and tabletop exercises; advise during incidents.
• Turn cybersecurity strategy into actionable programs with clients and teams.
• Maintain client relationships and stay current on threats and regulations.

Skills

Executive consulting

Governance

Risk management

Compliance

Incident response

Strategic planning

Client relations

Regulatory knowledge

Education

Bachelor's Degree (B.A./B.S.) in technology field

Job description

ISOutsource is seeking an experienced virtual Chief Information Security Officer (vCISO) to guide client cybersecurity programs across the Western United States. The role focuses on governance, risk management, and compliance with standards such as NIST, CMMC, HIPAA, and SOC 2.

You will work with senior leadership to translate security into business outcomes. You will manage roadmaps, ISMS, and security programs while collaborating with internal teams and client executives to drive improvement