Vai al contenuto
    Posizione apertaPubblicato 12 ottobre 2026

    Virtual Chief Information Security Officer (vCISO)

    We are seeking a Virtual Chief Information Security Officer (vCISO) to embed within our engineering operations under a fractional staff augmentation model. You will serve as the executive security leader, bridging the gap between technical execution and enterprise compliance requirements. You will not be responsible for hands-on keyboard infrastructure changes; instead, you will govern the security strategy, maintain continuous audit readiness, and act as the primary liaison for enterprise security inquiries.

    • Modalità di lavoro: Completamente da remoto

    Il ruolo

    Key Responsibilities

    Governance, Risk, and Compliance (GRC)

    • Assume primary ownership of automated compliance platforms, ensuring continuous alignment with SOC 2 Type II, ISO 27001, and PCI DSS frameworks.

    • Develop, formally approve, and maintain essential security policies (e.g., Incident Response, Access Control, Disaster Recovery) tailored to operational realities.

    • Conduct periodic risk assessments and translate regulatory requirements into actionable technical mandates for the cloud architecture and engineering teams.

    Enterprise Liaison & Vendor Management

    • Serve as the executive face of security, participating in technical leadership meetings with enterprise clients, stakeholders, and external auditors.

    • Complete inbound third-party risk management (TPRM) assessments and security questionnaires required by enterprise partners.

    • Review and enforce Data Processing Agreements (DPAs) and vendor security standards for any third-party tools integrated into the platform.

    Strategic Security Oversight

    • Provide strategic oversight for the remediation of legacy technical debt, prioritizing high-risk vulnerabilities (e.g., exposed credentials, unencrypted data) for the development team to execute.

    • Design and enforce secure software development lifecycle (SDLC) guardrails, ensuring automated security testing is effectively integrated into CI/CD pipelines.

    • Quantify cyber risk in business terms to justify necessary infrastructure investments and resource allocation to executive leadership.

    Requisiti

    Required Qualifications

    • Experience: 8+ years in cybersecurity leadership, GRC management, or vCISO consulting roles.

    • Framework Expertise: Deep practical knowledge of SOC 2 Type II, ISO 27001, PCI DSS, and privacy regulations (GDPR/US Privacy Patchwork).

    • Certifications: Active CISSP, CISM, CRISC, or CISA certification.

    • Communication: Exceptional executive communication skills with demonstrated success navigating client audits and vendor risk reviews.

    Come funziona per te

    1. Candidati una volta

      Scegli una posizione aperta o invia una candidatura spontanea. Il tuo CV basta per iniziare.

    2. Registra i colloqui

      Rispondi alle domande in video quando preferisci: prima su come lavori, poi sul tuo stack, con un breve test a tempo.

    3. Una breve call

      Se i colloqui vanno bene, ci conosciamo in una breve videochiamata.

    4. Progetti dei clienti

      Ti proponiamo per ogni ruolo adatto, non solo per quello a cui ti sei candidato, e ti diciamo quando al momento non c’è nulla.

    Come trattiamo i tuoi dati: informativa sulla privacy

    Vedi tutte le posizioni
    Network di talentiCandidati al network di professionistiNon trovi una posizione adatta? Invia una candidatura spontanea. I nostri esperti esamineranno il tuo profilo e ti contatteranno quando si presenterà un’opportunità pertinente.