Zum Inhalt springen
    Offene StelleVeröffentlicht 12. Oktober 2026

    Virtual Chief Information Security Officer (vCISO)

    We are seeking a Virtual Chief Information Security Officer (vCISO) to embed within our engineering operations under a fractional staff augmentation model. You will serve as the executive security leader, bridging the gap between technical execution and enterprise compliance requirements. You will not be responsible for hands-on keyboard infrastructure changes; instead, you will govern the security strategy, maintain continuous audit readiness, and act as the primary liaison for enterprise security inquiries.

    • Arbeitsort: Vollständig remote

    Über die Rolle

    Key Responsibilities

    Governance, Risk, and Compliance (GRC)

    • Assume primary ownership of automated compliance platforms, ensuring continuous alignment with SOC 2 Type II, ISO 27001, and PCI DSS frameworks.

    • Develop, formally approve, and maintain essential security policies (e.g., Incident Response, Access Control, Disaster Recovery) tailored to operational realities.

    • Conduct periodic risk assessments and translate regulatory requirements into actionable technical mandates for the cloud architecture and engineering teams.

    Enterprise Liaison & Vendor Management

    • Serve as the executive face of security, participating in technical leadership meetings with enterprise clients, stakeholders, and external auditors.

    • Complete inbound third-party risk management (TPRM) assessments and security questionnaires required by enterprise partners.

    • Review and enforce Data Processing Agreements (DPAs) and vendor security standards for any third-party tools integrated into the platform.

    Strategic Security Oversight

    • Provide strategic oversight for the remediation of legacy technical debt, prioritizing high-risk vulnerabilities (e.g., exposed credentials, unencrypted data) for the development team to execute.

    • Design and enforce secure software development lifecycle (SDLC) guardrails, ensuring automated security testing is effectively integrated into CI/CD pipelines.

    • Quantify cyber risk in business terms to justify necessary infrastructure investments and resource allocation to executive leadership.

    Anforderungen

    Required Qualifications

    • Experience: 8+ years in cybersecurity leadership, GRC management, or vCISO consulting roles.

    • Framework Expertise: Deep practical knowledge of SOC 2 Type II, ISO 27001, PCI DSS, and privacy regulations (GDPR/US Privacy Patchwork).

    • Certifications: Active CISSP, CISM, CRISC, or CISA certification.

    • Communication: Exceptional executive communication skills with demonstrated success navigating client audits and vendor risk reviews.

    So läuft es für Sie ab

    1. Einmal bewerben

      Wählen Sie eine offene Stelle oder senden Sie eine Initiativbewerbung. Ihr Lebenslauf reicht für den Start.

    2. Interviews aufzeichnen

      Beantworten Sie Fragen per Video, wann es Ihnen passt: zuerst zu Ihrer Arbeitsweise, dann zu Ihrem Stack, mit einem kurzen Test.

    3. Ein kurzes Gespräch

      Wenn Ihre Interviews überzeugen, lernen wir Sie in einem kurzen Videocall kennen.

    4. Passende Kundenprojekte

      Wir schlagen Sie für jede passende Rolle vor, nicht nur für die, auf die Sie sich beworben haben, und sagen Ihnen, wenn gerade nichts passt.

    Wie wir mit Ihren Daten umgehen: Datenschutzerklärung

    Alle Stellen anzeigen
    Talent-PoolBewirb dich für das TalentnetzwerkKeine passende Stelle dabei? Bewirb dich initiativ. Unsere Fachleute prüfen dein Profil und melden sich, wenn eine passende Gelegenheit entsteht.