vCISO — Cybersecurity Strategy & Governance Expert

ISOutsource; Austin (TX); On-site; USD 155,000 - 210,000; Full time

Benefits offered by this job

Health, dental, vision insurance

401(k) with employer match

Paid time off

Parking and mileage reimbursement

Snacks, beverages, and team events

Quarterly bonuses

Job summary

ISOutsource seeks an experienced vCISO to guide client cybersecurity programs with executive-level influence. You will develop roadmaps, lead ISMS initiatives, and manage governance, risk assessments, and compliance with NIST, CMMC, HIPAA, PCI DSS, SOC 2. Build strong client relationships and turn complex risks into clear business guidance.

The role is full-time with a competitive package, quarterly bonuses, benefits, and travel to client sites as needed.

Qualifications

• Minimum 8 years of cybersecurity leadership experience.
• Bachelor's Degree in a technology field.
• Some local travel to client sites is required.
• Valid driver's license and insurance.

Responsibilities

• Provide executive-level cybersecurity consulting to clients.
• Develop and manage cybersecurity roadmaps and ISMS.
• Lead governance, risk assessments, gap analyses, risk registers, remediation priorities.
• Guide regulatory and framework requirements (NIST, CMMC, HIPAA, PCI DSS, SOC 2).
• Support audits, compliance assessments, and annual attestations.
• Advise on vulnerability management and third-party risk.
• Lead incident response planning and tabletop exercises.
• Present cybersecurity program updates to client leadership.
• Partner with internal and client teams to implement strategy.
• Support assessments, proposals, and strategic engagements.

Skills

Cybersecurity leadership

Risk management

Regulatory compliance

NIST CSF

CMMC

HIPAA

SOC 2

Client relationships

Strategic roadmaps

Education

Bachelor's Degree in technology field

Tools

GRC tools

Job description

ISOutsource seeks an experienced vCISO to guide client cybersecurity programs with executive-level influence. You will develop roadmaps, lead ISMS initiatives, and manage governance, risk assessments, and compliance with NIST, CMMC, HIPAA, PCI DSS, SOC 2. Build strong client relationships and turn complex risks into clear business guidance.

The role is full-time with a competitive package, quarterly bonuses, benefits, and travel to client sites as needed.