Senior vCISO & GRC Leader for Cyber as a Service

Point Solutions Security; Denver (CO); À distance; USD 140 000 - 190 000; Plein temps

Avantages offerts par ce poste

Ownership of client engagements

Flexible remote work

Executive-facing responsibilities

Professional development budgets

Collaborative senior team

Impactful security work

Résumé du poste

Point Solutions Security (PSS) seeks a GRC Manager, vCISO Services to lead client governance and security programs. You’ll serve as the client-facing security leader for a portfolio of Cyber as a Service engagements, guiding governance meetings, risk reviews and executive briefings with PSS leadership backing your decisions.

You’ll drive SOC 2, ISO 27001 and CMMC efforts, including readiness, audits and control design, while coordinating evidence, policies and auditors.

Qualifications

• 7+ years in security, including 2+ in management.
• Active CISSP, CISM or CRISC certification.
• Deep hands‑on experience in SOC 2 / ISO 27001 or CMMC / NIST 800-171 assessments.
• Proven track record delivering measurable results to executives.
• Bonus: broader SOC 2/ISO and CMMC certifications or OT/utility experience.

Responsabilités

• Aspire to client success as the named vCISO for a portfolio of CaaS clients.
• Lead SOC 2 and ISO 27001 programs from readiness to audits, including evidence and coordination.
• Drive CMMC programs for defense contractors, including SSPs, POA&Ms and enclaves.
• Manage the GRC cycle: risk assessments, ISMS operations, and policy upkeep.
• Deliver on CaaS commitments with regular reviews and scenario exercises.
• Mentor and review work of a supporting analyst and refine playbooks.

Connaissances

GRC programs

Client leadership

SOC 2 / ISO 27001

CMMC / NIST

Executive briefing

Risk management

Team management

Description du poste

Point Solutions Security (PSS) seeks a GRC Manager, vCISO Services to lead client governance and security programs. You’ll serve as the client-facing security leader for a portfolio of Cyber as a Service engagements, guiding governance meetings, risk reviews and executive briefings with PSS leadership backing your decisions.

You’ll drive SOC 2, ISO 27001 and CMMC efforts, including readiness, audits and control design, while coordinating evidence, policies and auditors.