Assistant Vice President, Deputy Chief Information Security Officer

Key Responsibilities

• Develop, implement, and maintain the organization’s cybersecurity strategy, policies, and procedures
• Assess security posture and identify gaps, vulnerabilities, and areas for improvement
• Advisory executive leadership on cybersecurity risks, incident preparedness, and security investments
• Oversee risk assessments, security audits, and remediation planning
• Guide security governance, compliance, and regulatory readiness efforts
• Support incident response planning, breach response coordination, and post-incident analysis
• Monitor emerging threats and recommend appropriate controls and mitigation strategies
• Collaborate with IT, legal, compliance, and operational teams to align security with business objectives
• Review third-party/vendor security risks and recommend safeguards
• Help define and maintain business continuity and disaster recovery security considerations
• Prepare reports, dashboards, and executive briefings on security performance and risk status
• Promote security awareness and best practices across the organization

Required Qualifications

• Minimum of 2 years of experience in IT security, cybersecurity, information security, or a related field
• Experience in security governance, risk management, compliance, and incident response
• Strong knowledge of network security, endpoint protection, identity and access management, cloud security, and security frameworks
• Demonstrated ability to communicate technical security concepts to non-technical stakeholders and executive leadership
• Experience developing security policies, standards, and strategic roadmaps
• Strong analytical, organizational, and problem-solving skills
• Ability to work independently in a virtual or fractional leadership capacity
• Minimum Certification Requirement: Candidates must hold at least one of the following certifications: SSCP (Systems Security Certified Practitioner), or a comparable cybersecurity certification

Preferred Qualifications

• Experience serving as a vCISO, vCSO, Security Manager, or Information Security Consultant
• Familiarity with compliance standards such as NIST, ISO 27001, SOC 2, HIPAA, GLBA, or CMMC
• Experience with cloud environments such as AWS, Azure, or Google Cloud
• Relevant advanced certifications such as CISSP, CISM, CRISC, or CISA
• Experience in regulated industries or working with small to mid-sized businesses

Education

• Bachelor’s degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field preferred
• Equivalent professional experience may be considered in lieu of formal education

Work Environment

• Remote/Virtual with some onsite work required (clientele mostly resides in the Arkansas (Little Rock) area)
• Full-time

Success in This Role

A successful vCSO will provide practical and strategic security leadership, strengthen the organization’s security posture, reduce risk exposure, and help ensure the business is prepared for evolving cyber threats.