Senior VCISO

Risk Assessment and Management: Utilizing principles from a formal framework (such as RMF as an example) create a roadmap for our clients Assist in driving risk assessments for various projects and business processes. Assist in the development and implementation of risk mitigation strategies. For clients that contract for that level of service, maintain and update a risk register to reflect current status and changes. Assist in overseeing risk assessments and mitigation strategies for clients as assigned and VC3 when asked

Utilizing principles from a formal framework (such as RMF as an example) create a roadmap for our clients

Assist in driving risk assessments for various projects and business processes.

Assist in the development and implementation of risk mitigation strategies.

For clients that contract for that level of service, maintain and update a risk register to reflect current status and changes.

Assist in overseeing risk assessments and mitigation strategies for clients as assigned and VC3 when asked

Compliance Activities: Advise clients on adhering to published polices and legal standards. Prepare and manage documentation for compliance activities, such as audits, controls, and compliance checks. Monitor changes in relevant legislation and the regulatory environment and take appropriate actions. For clients that contract the proper level of service, maintain the GRC platform and collaborate with the client on pursuing their GRC goals for alignment (vs compliance) Record, manage, and analyze compliance data to support reporting and decision-making. Develop and maintain comprehensive documentation of compliance and risk management activities. Prepare regular reports on compliance and risk status for senior management and external regulators.

Advise clients on adhering to published polices and legal standards.

Prepare and manage documentation for compliance activities, such as audits, controls, and compliance checks.

Monitor changes in relevant legislation and the regulatory environment and take appropriate actions.

For clients that contract the proper level of service, maintain the GRC platform and collaborate with the client on pursuing their GRC goals for alignment (vs compliance)

Record, manage, and analyze compliance data to support reporting and decision-making.

Develop and maintain comprehensive documentation of compliance and risk management activities.

Prepare regular reports on compliance and risk status for senior management and external regulators.

Data Management and Reporting: Provide regular reports summarizing activity and posture Provide cyber-security trends and insights

Provide regular reports summarizing activity and posture

Provide cyber-security trends and insights

Client Interaction: Assist the VCISO in daily tasks involving client interactions related to GRC issues. Provide clients with compliance and risk management guidance and support. Participate in client meetings and presentations as required.

Assist the VCISO in daily tasks involving client interactions related to GRC issues.

Provide clients with compliance and risk management guidance and support.

Participate in client meetings and presentations as required.

Technical Documentation and Presentations: Analyze and interpret technical documentation, such as vulnerability scans, and present findings to clients clearly and effectively. Develop and brief clients on technical documentation to ensure understanding and compliance.

Analyze and interpret technical documentation, such as vulnerability scans, and present findings to clients clearly and effectively.

Develop and brief clients on technical documentation to ensure understanding and compliance.

Engage and provide consulting services to mid-market and enterprise clients, including that have the contracted obligation: Provide strategic leadership in translating complex cybersecurity concepts into non-technical terms for clients to clearly understand specific applications to their business priorities. Understand and align with the client organization’s overall strategy and business environment to ensure cybersecurity initiatives support business objectives Partner with cross-functional teams to integrate security into product design and implementation, and to develop security solution offerings for clients. Drive the creation and execution of a robust cybersecurity plan and program within client environments, ensuring alignment with industry best practices as asked or contracted for. Assist in the development of the information security incident response program. Strategically develop and enhance client specific incident response programs as needed based on the development of Business Continuity and Disaster Recovery practices liaising with internal VC3 Departments as necessary. Lead comprehensive cybersecurity risk assessments based on the client organization’s assets, identify vulnerabilities, and recommend remediation strategies. Collaborate with clients to assist with vendor selection, providing guidance and checklists to ensure third party security compliance

Provide strategic leadership in translating complex cybersecurity concepts into non-technical terms for clients to clearly understand specific applications to their business priorities.

Understand and align with the client organization’s overall strategy and business environment to ensure cybersecurity initiatives support business objectives

Partner with cross-functional teams to integrate security into product design and implementation, and to develop security solution offerings for clients.

Drive the creation and execution of a robust cybersecurity plan and program within client environments, ensuring alignment with industry best practices as asked or contracted for.

Assist in the development of the information security incident response program.

Strategically develop and enhance client specific incident response programs as needed based on the development of Business Continuity and Disaster Recovery practices liaising with internal VC3 Departments as necessary.

Lead comprehensive cybersecurity risk assessments based on the client organization’s assets, identify vulnerabilities, and recommend remediation strategies.

Collaborate with clients to assist with vendor selection, providing guidance and checklists to ensure third party security compliance

Project Support: Support various cybersecurity-related projects, ensuring that they meet compliance and risk requirements. Collaborate as needed to ensure that cybersecurity principles are integrated into all facets of operations.

Support various cybersecurity-related projects, ensuring that they meet compliance and risk requirements.

Collaborate as needed to ensure that cybersecurity principles are integrated into all facets of operations.

Engage with industry peers and continuously analyze and review new security technologies and practices as informed by industry best practice.

Work closely with internal stakeholders to stay informed of planned changes to technologies, practices, and business activities that could impact security.

Collaborate across all VC3 departments to maximize our client security posture and experience during onboarding, system design, strategy and ongoing support

Maintain precise and up-to-date timesheets, and document notes on troubleshooting steps and client communications.

Actively seek and reflect on feedback from stakeholders, colleagues, and management using it to drive improvement.

Escalate complex issues to senior resources or relevant teams when necessary.

Engage actively in team huddles, L10 meetings, and other collaboratively structured meetings.

Develop and revise documentation promptly to reflect changes or new findings.

Attend company-based meetings as required

Additional duties as assigned

Client Cyber Security Incidents

Client Utilization

Security MRR Growth

Client Security Awareness Education

Security scoring done

Roadmaps delivered

Bachelor’s Degree or Master’s Degree (preferred) in an IT-based curriculum, or at least 10 years’ experience in risk management, information security, or programming.

One or more of the following qualifications are highly desirable: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information systems Auditor (CISA), or Certified Risk & Information Security Controls (CRISC), or CMMC RP (or higher)

Extensive experience in cybersecurity strategy development, risk management, and program administration.

Deep knowledge of common cybersecurity frameworks (CMMC, CIS, NIST, MITRE ATT&CK)

Expertise with compliance and regulatory requirements

An understanding of SIEM platforms, perimeter security, endpoint detection and response platforms, vulnerability management solutions, all aspects of IT infrastructure (compute, route/switch, security) and cloud security

Possesses a high level of self-motivation and initiative, consistently taking ownership of tasks and projects.

Demonstrate a strong sense of autonomy and resourcefulness, capable of making independent decisions and solving problems without relying heavily on coaching or direction.

Exhibit excellent time management and organizational skills, effectively prioritizing tasks and allocating resources to meet deadlines and achieve objectives without extensive oversight.

Displays a proactive and self-directed approach to learning and staying updated on industry trends, seeking out relevant information and resources to enhance their knowledge and skills.

Shows the ability to adapt and thrive in ambiguous or uncertain situations, quickly assessing and navigating challenges.

Possesses strong critical thinking and decision-making abilities, evaluating complex situations and determining the best course of action, while considering the broader organizational goals and objectives.

Demonstrates effective communication skills, both written and verbal, articulating ideas and expectations clearly and concisely, minimizing the need for frequent guidance or clarification.

Ability to build and manage relationships with clients (internal and external) through consistent and proactive communication.

Extraordinarily strong interpersonal skills, able to build effective working relationships, solicit co-operation and collaborate with various stakeholders internally and externally.

Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment.

Available for domestic and international travel as required.