vCISO - Solutions Provider

Hamilton Barnes Associates Limited; Illinois; On-site; USD 121,500 - 148,500; Full time

Job summary

A leading technology solutions provider in the United States is seeking a highly experienced Virtual Chief Information Security Officer (vCISO). The vCISO will lead and develop cybersecurity strategies, advise executives, and ensure regulatory compliance. The ideal candidate will have over 10 years of cybersecurity experience and a strong understanding of security frameworks. This role offers a competitive salary of $135,000 per annum.

Qualifications

• 10+ years of experience in cybersecurity, including 5+ years in a senior leadership role.
• Proven track record of developing enterprise security programs.
• Strong understanding of NIST CSF, ISO 27001, and other regulatory standards.

Responsibilities

• Define and implement cybersecurity strategy aligned with organizational goals.
• Conduct risk assessments to identify security and compliance weaknesses.
• Act as primary security advisor to executives.

Skills

Cybersecurity experience

Leadership in security programs

Regulatory compliance

Security frameworks understanding

Job description

This leading technology solutions provider delivers end-to-end IT services across Managed Services, Cloud, Cyber Security, Audio-Visual, Physical Security and Unified Communications. Supporting clients across enterprise, education, government and commercial sectors, the team combines deep technical expertise with a creative, consultative approach to help organisations innovate, scale and stay secure in an ever-evolving digital landscape.

We are seeking a highly experienced and strategic Virtual Chief Information Security Officer (vCISO) to lead, develop, and mature their cybersecurity posture. As a trusted advisor, the vCISO will work closely with executive leadership, IT, and risk management teams to align security strategies with business objectives. This role involves assessing current security programs, building risk-based security roadmaps, ensuring regulatory compliance, and responding to evolving cyber threats.

If you are interested in this role and want to find out more, get in touch and apply today.

Key Responsibilities:

• Security Program Leadership
  • Define and implement a comprehensive cybersecurity strategy aligned with organizational goals and risk appetite.
  • Develop, document, and maintain security policies, standards, and procedures.
  • Establish and manage the information security program roadmap.
• Governance, Risk & Compliance (GRC)
  • Conduct risk assessments and gap analyses to identify security and compliance weaknesses.
  • Ensure adherence to regulatory requirements such as HIPAA, GDPR, PCI-DSS, SOX, CCPA, or industry-specific standards.
  • Support vendor risk management and third-party due diligence.
• Executive Advisory
  • Act as the primary security advisor to executives and the board.
  • Translate technical risks into business language and provide risk-based recommendations.
  • Lead or participate in board-level and audit committee briefings.
• Incident Response & Business Continuity
  • Develop and oversee incident response and disaster recovery plans.
  • Lead or coordinate security incident investigations and response efforts.
  • Evaluate and test the organization’s ability to recover from cyberattacks and data loss.
• Security Operations Oversight
  • Guide or manage the implementation of core security controls (e.g., IAM, endpoint security, network segmentation, DLP, etc.).
  • Support or supervise SOC services and threat intelligence integrations.
  • Recommend technology solutions based on organizational needs and maturity level.
• Awareness & Culture
  • Promote a culture of security awareness across the organization.
  • Design and deliver security awareness and training programs.
  • Advise on secure practices for remote work, cloud adoption, and digital transformation initiatives.

Skills & Experience Required:

• 10+ years of experience in cybersecurity, with 5+ years in a senior leadership or CISO role.
• Proven experience developing and managing enterprise security programs.
• Strong understanding of security frameworks such as NIST CSF, ISO 27001, CIS Controls, and regulatory standards.
• Ability to operate independently and work with executive stakeholders remotely.

Preferred:

• Experience across multiple industries (e.g., healthcare, finance, SaaS, manufacturing).
• Familiarity with security concerns in cloud-native and hybrid environments.
• Professional certifications such as CISSP, CISM, CISA, CCISO, or equivalent.

Salary:

• $135,000 per annum