Senior VCISO

Department: Technology Operations

Employment Type: Full Time

Location: USA, Remote, USA - Remote, Remote

What you will be doing:

• Risk Assessment and Management: 
  • Utilizing principles from a formal framework (such as RMF as an example) create a roadmap for our clients 
  • Assist in driving risk assessments for various projects and business processes. 
  • Assist in the development and implementation of risk mitigation strategies. 
  • For clients that contract for that level of service, maintain and update a risk register to reflect current status and changes. 
  • Assist in overseeing risk assessments and mitigation strategies for clients as assigned and VC3 when asked 
• Compliance Activities: 
  • Advise clients on adhering to published polices and legal standards. 
  • Prepare and manage documentation for compliance activities, such as audits, controls, and compliance checks. 
  • Monitor changes in relevant legislation and the regulatory environment and take appropriate actions. 
  • For clients that contract the proper level of service, maintain the GRC platform and collaborate with the client on pursuing their GRC goals for alignment (vs compliance) 
  • Record, manage, and analyze compliance data to support reporting and decision-making. 
  • Develop and maintain comprehensive documentation of compliance and risk management activities. 
  • Prepare regular reports on compliance and risk status for senior management and external regulators. 
• Data Management and Reporting: 
  • Provide regular reports summarizing activity and posture 
  • Provide cyber-security trends and insights 
• Client Interaction: 
  • Assist the VCISO in daily tasks involving client interactions related to GRC issues. 
  • Provide clients with compliance and risk management guidance and support. 
  • Participate in client meetings and presentations as required. 
• Technical Documentation and Presentations: 
  • Analyze and interpret technical documentation, such as vulnerability scans, and present findings to clients clearly and effectively. 
  • Develop and brief clients on technical documentation to ensure understanding and compliance. 
• Engage and provide consulting services to mid-market and enterprise clients, including that have the contracted obligation: 
  • Provide strategic leadership in translating complex cybersecurity concepts into non-technical terms for clients to clearly understand specific applications to their business priorities. 
  • Understand and align with the client organization’s overall strategy and business environment to ensure cybersecurity initiatives support business objectives 
  • Partner with cross-functional teams to integrate security into product design and implementation, and to develop security solution offerings for clients. 
  • Drive the creation and execution of a robust cybersecurity plan and program within client environments, ensuring alignment with industry best practices as asked or contracted for. 
  • Assist in the development of the information security incident response program. 
  • Strategically develop and enhance client specific incident response programs as needed based on the development of Business Continuity and Disaster Recovery practices liaising with internal VC3 Departments as necessary. 
  • Lead comprehensive cybersecurity risk assessments based on the client organization’s assets, identify vulnerabilities, and recommend remediation strategies. 
  • Collaborate with clients to assist with vendor selection, providing guidance and checklists to ensure third party security compliance 
• Project Support: 
  • Support various cybersecurity-related projects, ensuring that they meet compliance and risk requirements. 
  • Collaborate as needed to ensure that cybersecurity principles are integrated into all facets of operations. 

• Engage with industry peers and continuously analyze and review new security technologies and practices as informed by industry best practice. 
• Work closely with internal stakeholders to stay informed of planned changes to technologies, practices, and business activities that could impact security. 
• Collaborate across all VC3 departments to maximize our client security posture and experience during onboarding, system design, strategy and ongoing support 
• Maintain precise and up-to-date timesheets, and document notes on troubleshooting steps and client communications. 
• Actively seek and reflect on feedback from stakeholders, colleagues, and management using it to drive improvement. 
• Escalate complex issues to senior resources or relevant teams when necessary. 
• Engage actively in team huddles, L10 meetings, and other collaboratively structured meetings. 
• Develop and revise documentation promptly to reflect changes or new findings. 
• Attend company-based meetings as required 
• Additional duties as assigned 

• Client Cyber Security Incidents 
• Client Utilization 
• Security MRR Growth 
• Client Security Awareness Education 
• Security scoring done 
• Roadmaps delivered 

The tools you bring:

• Bachelor’s Degree or Master’s Degree (preferred) in an IT-based curriculum, or at least 10 years’ experience in risk management, information security, or programming. 
• One or more of the following qualifications are highly desirable: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information systems Auditor (CISA), or Certified Risk & Information Security Controls (CRISC), or CMMC RP (or higher) 
• Extensive experience in cybersecurity strategy development, risk management, and program administration. 
• Deep knowledge of common cybersecurity frameworks (CMMC, CIS, NIST, MITRE ATT&CK) 
• Expertise with compliance and regulatory requirements 
• An understanding of SIEM platforms, perimeter security, endpoint detection and response platforms, vulnerability management solutions, all aspects of IT infrastructure (compute, route/switch, security) and cloud security 
• Possesses a high level of self-motivation and initiative, consistently taking ownership of tasks and projects. 
• Demonstrate a strong sense of autonomy and resourcefulness, capable of making independent decisions and solving problems without relying heavily on coaching or direction. 
• Exhibit excellent time management and organizational skills, effectively prioritizing tasks and allocating resources to meet deadlines and achieve objectives without extensive oversight. 
• Displays a proactive and self-directed approach to learning and staying updated on industry trends, seeking out relevant information and resources to enhance their knowledge and skills. 
• Shows the ability to adapt and thrive in ambiguous or uncertain situations, quickly assessing and navigating challenges. 
• Possesses strong critical thinking and decision-making abilities, evaluating complex situations and determining the best course of action, while considering the broader organizational goals and objectives. 
• Demonstrates effective communication skills, both written and verbal, articulating ideas and expectations clearly and concisely, minimizing the need for frequent guidance or clarification. 
•  Ability to build and manage relationships with clients (internal and external) through consistent and proactive communication. 
• Extraordinarily strong interpersonal skills, able to build effective working relationships, solicit co-operation and collaborate with various stakeholders internally and externally. 

• Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment. 
• Available for domestic and international travel as required. 

What's in it for you: