Virtual Chief Information Security Officer

GreyDoc Solutions LLC; United States; Remote; USD 165,000 - 358,000; Part time

Job summary

GreyDoc Solutions LLC is a technology and security consulting firm offering tailored cybersecurity strategies and governance frameworks. The vCISO role is remote and contract-based, leading security strategy and governance for client organizations.

You will assess security postures, develop policies, guide controls across apps, infrastructure and cloud, overseeing risk, regulatory compliance, and incident response planning. This role involves remote collaboration with clients and teams.

Qualifications

• Experience developing policies, standards, and governance frameworks.
• Hands-on cybersecurity expertise including risk assessment, threat modeling, incident response.
• Proficiency in application security for web and mobile apps.
• Knowledge of business continuity planning and disaster recovery strategies.
• Ability to communicate security topics to non-technical stakeholders.
• Familiarity with NIST, ISO 27001, SOC 2, HIPAA, PCI DSS (or similar).
• Ability to work independently in a remote consulting capacity.
• Certifications such as CISSP, CISM, CISA, CCSP are highly beneficial.
• Bachelors degree in related field or equivalent practical experience.

Responsibilities

• Meet with client leadership to present security roadmaps.
• Collaborate with technical teams to remediate vulnerabilities.
• Oversee risk assessments and regulatory/compliance guidance.
• Ensure BC/DR plans align with organizational objectives.
• Provide ongoing guidance on security best practices, metrics, and reporting.

Skills

Information security management

Cybersecurity

Risk assessment

Threat modeling

Incident response

Application security

Security architecture

Executive communication

Independent consultant work

Education

Bachelor's degree or equivalent in Information Security / CS / IT

Job description

Company Description

GreyDoc Solutions LLC is a technology and security consulting firm that supports organizations in protecting their information assets and digital operations. The company focuses on helping clients design and maintain secure, resilient environments that meet regulatory, compliance, and business requirements. GreyDoc Solutions LLC works with a variety of industries, providing tailored cybersecurity strategies and governance frameworks. Team members collaborate remotely with clients and colleagues, using modern tools and methodologies to deliver practical, results-oriented solutions.

Role Description

The Virtual Chief Information Security Officer (vCISO) is a remote, contract role responsible for leading information security strategy and governance for client organizations. In this role, you will assess current security postures, develop and maintain security policies and standards, and guide the implementation of cybersecurity controls across applications, infrastructure, and cloud environments. You will oversee risk assessments, advise on regulatory and compliance requirements, and support incident response planning and coordination when security events occur. Day-to-day tasks include meeting with client leadership, presenting security roadmaps, collaborating with technical teams to remediate vulnerabilities, and ensuring that business continuity and disaster recovery plans are aligned with organizational objectives. You will also provide ongoing guidance on security best practices, metrics, and reporting to help clients make informed decisions about their security investments.

Qualifications

• Strong expertise in Information Security Management and Information Security, with experience developing policies, standards, and governance frameworks.
• Hands-on experience in Cybersecurity, including risk assessment, threat modeling, security architecture, and incident response.
• Proficiency in Application Security, including secure development practices, code review, and vulnerability management for web and mobile applications.
• Knowledge of Business Continuity planning, disaster recovery strategies, and resilience measures for critical systems and data.
• Experience advising executive leadership and technical teams, with the ability to communicate complex security topics to non-technical stakeholders.
• Familiarity with common security frameworks and regulations (e.g., NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, or similar) relevant to client industries.
• Proven ability to work independently in a remote, consulting capacity, managing multiple client engagements and priorities.
• Relevant professional certifications (e.g., CISSP, CISM, CISA, CCSP, or equivalent) are highly beneficial.
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.