Virtual CISO

Responsibilities

• Average daily interaction with clients to understand their needs and expectations.
• Assess client cybersecurity posture, identify risks, gaps, and vulnerabilities.
• Recommend and help implement security training, tools, and policies.
• Review client cybersecurity policies, procedures, and controls with actionable feedback.
• Maintain and update client Risk Registers with clear notes and next steps.
• Track client progress against frameworks such as CIS Controls and NIST CSF.
• Translate technical security risks into clear business impacts for decision-makers.
• Identify, escalate, and assist in resolving security issues with urgency.
• Support incident response and remediation efforts where needed.
• Develop concise reports and communicate updates to IT and executive stakeholders.
• Contribute to the development and improvement of security processes and procedures.
• Stay current with emerging threats, tools, and best practices to guide clients effectively.

Qualifications & Experience

• Strong client relationship management, including listening, expectation setting, and results delivery.
• Strong understanding of core cybersecurity concepts (networks, assets, data, users).
• Ability to assess risk and provide practical recommendations.
• Clear communicator with both technical and non-technical audiences.
• Strong problem-solving, documentation, and customer service skills.
• Familiarity with security frameworks (CIS, NIST, MITRE, OWASP).
• Hands-on exposure to system administration or vulnerability testing.
• Interest in continuous learning and staying current with threats and tools.
• Public Trust background check (Limited Requirement).
• Relevant work experience in managed services industry.
• Cyber community participation (conferences/groups/tool authoring/CTFs).
• Understanding of CIS Controls, NIST CSF, MITRE ATT&CK, and OWASP.
• Relevant degree or certifications (Security+, CySA+, CEH; CISSP/CISM a plus).