Virtual Chief Information Security Officer (vCISO)

Vistrada LLC; United States; Remote; USD 150,000 - 200,000; Full time

Job summary

Vistrada LLC is seeking a Virtual Chief Information Security Officer (vCISO) to provide strategic cybersecurity guidance to our clients. You will lead and oversee security programs, assess risk, and drive remediation plans across diverse environments.

In this remote-capable role, you will mentor security analysts, develop security roadmaps, and coordinate with vendors, clients, and internal stakeholders to improve governance, risk management, and incident response capabilities.

Qualifications

• CISO experience or readiness to perform as CISO.
• Expert knowledge of cybersecurity frameworks and regulations (NIST, ISO, CMMC, PCI, COBIT, DFARS, HIPAA).
• Hands-on incident response coordination and oversight.
• Strong IT risk management across applications, infrastructure, networks and vendors.
• Bachelor's degree in CS/Accounting/MIS or comparable experience.
• Certifications such as CISA, CISM or CISSP.
• Consulting experience is a plus.

Responsibilities

• Provide expert security advisory and program oversight.
• Lead security assessments and remediation planning with high-quality reports.
• Manage a team of security analysts with mentoring.
• Develop and oversee information security programs.
• Develop security roadmaps and action plans.
• Vendor and third-party risk management support and due diligence.
• Develop business continuity and incident response plans.
• Support business development and respond to client needs.
• Architect high quality security solutions for clients.
• Perform other duties as assigned.

Skills

CISO experience

Cybersecurity frameworks

Incident response

IT risk management

Stakeholder communication

Consulting experience

Education

Bachelor's degree in Computer Science or related field

Job description

Virtual Chief Information Security Officer (vCISO)

Vistrada is looking to hire strong Virtual Chief Information Security Officers (CISOs). The vCISO will provide strategic cybersecurity guidance and oversight to Vistrada clients by leading and managing their cybersecurity programs to help protect their infrastructure, data, people, and customers. Candidates should have extensive knowledge of cybersecurity best practices, industry standards, and regulations. They should also have strong communication, leadership, and project management skills, as well as the ability to work collaboratively with internal and external stakeholders.

Job Responsibilities and Common Duties Include:

• Apply consultative and leadership skills to build high rapport with clients and team members.
• Provide expert security advisory, compliance and security program oversight, oversee security/compliance assessments, and prepare high-quality reports (including gap analysis, POAM, recommendations, and remediation planning).
• Lead and manage a team of security analyst(s) providing oversight, direction, expertise, and mentoring.
• Provide virtual chief information security officer services.
  • Support clients on a fractional owner model.
  • Act as an extension of client's information security management and governance function.
  • Develop, implement, and oversee information security programs.
  • Assess, identify requirements for, and make recommendations on security controls and technologies.
  • Develop security roadmaps and plans of action.
  • Vendor and third-party risk management program support and due diligence.
  • Develop business continuity and incident response plans.
  • Focus on key performance indicators, metrics, security dashboards.
• Assist With Business Development.
  • Work with potential new clients to understand and define business and technology needs, provide subject matter expertise to answer client’s questions and concerns, and identify and align services with client’s needs.
  • Support statements of work, identify resource requirements, assumptions, estimates, and assist with responses to Requests for Proposals (RFPs).
  • Identify client’s security and technology needs and identify business development opportunities as outcomes of assessment activities.
  • Develop expert level content, participate in panel discussions and public speaking events, and attend conference exhibitor opportunities.
• Architect high quality security solutions to the needs of clients.
• Perform other duties that may be assigned by management.

Experience / Skills:

• CISO experience OR qualified candidates who have not been a CISO and are ready to perform in the function.
• Expert knowledge of cybersecurity frameworks and regulations including: NIST, ISO, CMMC, PCI, COBIT, DFARS, HIPAA, etc.
• Hands-on incident response coordination and oversight experience.
• Strong understanding of IT Risk and components, including application, infrastructure, network, and vendors.
• Bachelor's degree in Computer Science, Accounting, MIS, or comparable work experience.
• Develop and present management level materials to effectively communicate and message to stakeholders.
• Relevant certifications such as CISA, CISM, or CISSP, or similar experience.
• Consulting experience is a plus.

Both Full Time and Part Time opportunities are available.

The annual pay range for this role is $150,000 - 200,000.

Company Background:

Vistrada is a business, technology and management services firm dedicated to helping clients plan, design and implement initiatives supporting Cybersecurity, Business Transformation, Integrated Risk Management, and Managed Services. Vistrada provides seasoned expertise and a flexible team structure allowing agility and responsiveness to support client’s evolving needs.

Our company operates nationally today with resources centered around NYC, Albany NY, Austin TX, Chicago, IL and Salt Lake City, UT. We have many resources who operate remotely and onsite as needed in a wider geography. Our business organization has four verticals and multiple cross competencies headed by leaders with more than 20+ years of experience on average