vCISO

ISOutsource; Florida; On-site; USD 155,000 - 210,000; Full time

Benefits offered by this job

Excellent compensation package

Health, dental, vision benefits

401(k) with employer match

Paid time off

Job summary

ISOutsource is seeking an experienced Virtual Chief Information Security Officer (vCISO) to guide client cybersecurity programs across governance, risk, and compliance. The role focuses on developing strategic roadmaps, ISMS, and proactive security posture improvements.

The ideal candidate will lead governance initiatives, manage risk assessments, and collaborate with sales and client teams to deliver strategic cybersecurity solutions.

Qualifications

• Bachelor's degree in a technology field is required or equivalent experience.
• CISSP or equivalent certifications are preferred.
• Experience leading cybersecurity programs and governance.
• Proven ability to translate risk into business terms for executives.

Responsibilities

• Provide executive-level cybersecurity consulting and strategic guidance to clients.
• Develop and manage cybersecurity roadmaps, security programs, and ISMS.
• Lead governance, risk assessments, gap analyses, risk registers, and governance meetings.
• Advise on regulatory requirements (NIST, HIPAA, PCI DSS, SOC 2, etc.).
• Support audit readiness, compliance assessments, and third-party reviews.
• Guide vulnerability management and third-party risk initiatives.
• Lead incident response planning and tabletop exercises.
• Present program updates and recommendations to client leadership.
• Collaborate with internal and client-facing teams to implement strategy.
• Build relationships with client executives and stakeholders.
• Stay current on threats and regulatory changes.

Skills

Cybersecurity governance

Risk management

Compliance

Incident response

Executive communication

Client consulting

Strategic leadership

Time management

Education

Bachelor's Degree in technology or related field

CISSP

CISM

CRISC

CISA

CGRC

Job description

**Location Requirement: We are only considering candidates who are currently located in Washington, Oregon, Idaho, Colorado, Florida, North Carolina, Texas, or Arizona, or who are willing to relocate to one of these states. If you do not currently reside in one of these states and are not willing to relocate, please do not apply.

The Opportunity

As a modern technology consulting firm, ISO is at the forefront of change. We strengthen our clients with technology solutions that help them boost performance, streamline processes, and excel at serving their clients.

With ISO, you’ll join a profitable, established company with over 500 clients throughout the Western United States. You can expect a fun, energetic, fast-paced environment where you are encouraged to bring your ideas and expertise, focus on our clients, try new things, and learn from mistakes and successes.

We’re looking for an experienced Virtual Chief Information Security Officer (vCISO) to help our clients build stronger, smarter cybersecurity programs.

As a vCISO, you’ll serve as a trusted advisor to client leadership, helping turn complex security, risk, and compliance needs into practical strategies and clear roadmaps. You’ll guide cybersecurity planning, governance, risk management, and compliance while helping clients continuously improve their security posture.

You’ll also collaborate across ISOutsource on cybersecurity assessments, GRC initiatives, Sales Engineering opportunities, and strategic conversations with clients and prospects.

Our Core Values

• We are client centric.
• We are innovative.
• We are results driven.
• We pursue excellence.
• We are trustworthy.
• We empower our team.

Why ISOutsource?

• Access to Management and Senior Leadership.
• Autonomy of schedule.
• Ability to define your own niche within the organization.
• Exposure to a wide range of technologies.
• Monthly training and career enhancing opportunities.
• Being part of a highly skilled team who is willing to help and share knowledge.
• Tons of room for growth, ISO has a long history of promoting from within.
• A company emphasis on work/life balance.

We Take Care of Our People

• Excellent total compensation package
• A salary range of $155,000 to $210,000 annualized
• Achievable quarterly bonuses.
• Competitive insurance benefits package includes health, dental, vision, life, disability coverage.
• 401(k) & Employer match
• Generous Paid Time Off schedule
• Parking and mileage reimbursement
• Stocked snacks, sodas, coffee, and lots of treats (including healthy alternatives)
• Monthly team activities include trivia nights, holiday parties and more.

Work you will do as an ISOutsource vCISO:

• Provide executive-level cybersecurity consulting and strategic guidance to clients.
• Develop and manage cybersecurity roadmaps, security programs, and Information Security Management Systems (ISMS).
• Lead cybersecurity governance, risk assessments, gap analyses, risk registers, remediation priorities, and security steering committee discussions.
• Guide clients through regulatory, contractual, and framework requirements, including NIST, CMMC, HIPAA, PCI DSS, SOC 2, cyber insurance, and other applicable standards.
• Support audit readiness, compliance assessments, cybersecurity questionnaires, and annual attestations.
• Advise on vulnerability management, third-party risk, privileged access, and other security posture improvement initiatives.
• Lead incident response planning, tabletop exercises, emerging-threat response, and provide strategic guidance during cybersecurity incidents.
• Prepare and present cybersecurity program updates, trends, risks, priorities, and recommendations to client leadership.
• Partner with internal technical and client-facing teams to turn cybersecurity strategy into action.
• Support cybersecurity assessments, proposals, Sales Engineering opportunities, and strategic engagements with clients and prospects.
• Build strong relationships with client executives, business leaders, auditors, and key stakeholders.
• Stay current on emerging threats, cybersecurity technologies, regulatory changes, and industry best practices.
• Meet established revenue, utilization, client satisfaction, documentation, and organizational goals, including timely daily time entry.
• Perform other duties as assigned.
  

Our ideal candidate will possess the following qualities:

• A passion for customer service
• Strong time management skills
• Excellent communication skills (both technical and non-technical)
• Track records of Customer Loyalty and Exemplary Service.
• Demonstration of the ability to communicate effectively with non-technical decision makers

Highly sought-after experience and skill includes:

• Experience designing, implementing, managing, or maturing cybersecurity programs.
• Strong knowledge of cybersecurity governance, risk management, compliance, incident response, vulnerability management, and security program practices.
• Experience with cybersecurity and compliance frameworks such as NIST CSF, NIST 800-53/800-171, CIS Controls, CMMC, HIPAA, PCI DSS, and SOC 2.
• Experience supporting cybersecurity assessments, audits, compliance readiness, third-party reviews, and remediation efforts.
• Ability to develop strategic cybersecurity roadmaps, risk registers, executive reporting, and prioritized improvement plans.
• Proven ability to translate cybersecurity risks and technical concepts into clear business recommendations for executive and non-technical audiences.
• Strong consulting, presentation, facilitation, documentation, and client relationship skills.

Additional experience we look for includes:

• Experience working with SMB, mid-market, or Managed Service Provider clients is preferred.
  
• Relevant certifications such as CISSP, CISM, CRISC, CISA, CGRC, or equivalent are preferred.

Requirements:

• Bachelor's Degree (B.A./B.S.) from four-year college or university in a technology based field, or comparable certifications/education or equivalent field experience.
• Minimum of 8 years of progressive experience in cybersecurity, risk management, compliance, security operations, or information technology leadership.
• Valid driver's license with insurance
• Some local travel to and from clients is required

ISOutsource is an equal opportunity firm.

We are driven by seeing our team succeed and grow, and we work to ensure everyone contributes to their fullest potential. We consider all qualified applicants without regard to race, color, sex, religion, age, marital status, national origin, citizenship or immigration status, the presence of any sensory, mental, or physical disability, genetic information, honorably discharged veteran or military status, sexual orientation, gender identity, political ideology, status as a victim of domestic violence, harassment, sexual assault, or stalking, family status, source of income, or any other status or characteristic protected by applicable local, state or federal law.

Final candidates will be required to submit to a complete background check.