Senior Virtual CISO

About the role

The Senior Virtual Chief Information Security Officer (Sr vCISO) serves as a trusted executive advisor to Marco clients, delivering strategic security leadership across both recurring consulting engagements and complex, point-in-time initiatives. This role partners directly with executive leadership and senior IT management to design, mature, and operationalize enterprise-level information security programs aligned to business objectives, regulatory requirements, and risk tolerance. The Sr vCISO acts as part of the client's executive team, offering CISO-level leadership, translating cybersecurity risks into business impacts, and guiding security investment decisions.

Location: Remote-eligible; must reside in one of the following states: DE, FL, IA, IL, IN, KY, MD, MI, MN, MO, ME, NE, ND, NJ, PA, RI, SD, TX, WI.

Application deadline: Applications are continuously accepted until the position has been filled.

Responsibilities

• Lead high-impact, complex consulting engagements that require senior-level judgment, strategic planning, and executive communication.
• Develop long-term consulting relationships with clients enrolled in a recurring consulting services program.
• Review the client’s current security and service management program and assist with developing program maturity.
• Identify gaps in current solutions and practices and build a corresponding roadmap that can be communicated to key stakeholders within the organization.
• Serve as the client’s virtual CISO, participating in executive and board-level discussions.
• Assess clients’ current security posture, governance models, and risk management practices, and lead the development of multi-year security maturity roadmaps.
• Advise and lead security risk assessments, helping clients understand and manage enterprise risk.
• Guide clients through compliance and framework alignment efforts (e.g., NIST CSF, CIS, ISO, HIPAA, CMMC, PCI), as applicable.
• Participate as a member of the client’s change advisory board and act as an emergency change approver.
• Provide strategic oversight and prioritization for client IT and security initiatives to ensure alignment with business objectives.
• Coordinate and advise on vendor-specific partnerships and third-party risk considerations.
• Assist with client’s annual security and technology budgeting, forecasting, and investment prioritization.
• Serve as a liaison between upper management and technical staff to ensure project goals are met by all parties involved.
• Serve as a senior subject matter expert within Marco, providing guidance on security strategy, service delivery, and solution positioning.
• Continually train and gain industry expertise in your area of expertise.
• Collaborate with internal Marco teams to develop solution recommendations, pricing guidance, and client-facing deliverables.
• Provide direct and indirect coaching, mentoring, and professional development support to vCISO, Advisory Risk Analyst, and consulting team members.

Qualifications

• Bachelor’s degree and ten years of experience as a proven industry expert; or equivalent combination of education and experience.
• Previous executive-level leadership preferred.
• Experience with service management concepts, systems testing, and evaluation methods (e.g. ITIL v4).
• At least one of the following certifications, or the ability to obtain within six months of being hired: CISSP, CRISC, CCISO, CISM.
• Maintains a current CMMC Certified Assessor (CCA) certification.
• Professional working knowledge of information security standards and guidelines such as ISO 27001, NIST 800-53, NIST 800-171, NIST CSF, CIS, PCI DSS, and HIPAA.

Skills

• Business financial acumen with ability to translate technology needs into financial decisions.
• High degree of emotional intelligence when communicating with executive level leaders.
• Natural aptitude for outcome-based reasoning.
• Demonstrate excellent verbal and written communication skills with internal and external clients.
• Self-starter, ability to plan and implement sales strategy with limited supervision.
• Ability to thrive in a competitive, goal-driven environment.