Virtual Chief Information Security Officer (vCISO)

Role overview

Responsibilities

• Develop and oversee cybersecurity strategies and roadmaps aligned with client business and regulatory requirements.
• Establish, implement, maintain, and improve ISMS programs; oversee governance frameworks, policies, standards, and procedures.
• Lead technology and cybersecurity risk assessments and support risk treatment and remediation.
• Support regulatory cybersecurity readiness and licensing engagements; support inspections, audits, assessments, and remediation programs.
• Oversee incident response, crisis management, resilience, vulnerability management, penetration testing, and remediation.
• Provide governance and oversight for cloud, infrastructure, and information security; manage third-party, vendor, and supply-chain cybersecurity risks.
• Prepare cybersecurity reports and updates for boards, executives, and senior management, working with compliance, technology, and risk teams.

Required experience and qualifications

• At least 10 years of relevant cybersecurity or information security experience.
• Previous CISO, Head of Security, Head of Information Security, or equivalent senior leadership experience.
• Strong knowledge of ISO 27001, NIST CSF, CIS Controls, and related cybersecurity requirements.
• Experience working with regulated organizations and strong cybersecurity governance, risk management, policy, and documentation capabilities.
• Experience engaging senior executives, boards, compliance officers, auditors, and other senior stakeholders.
• Ability to manage multiple client engagements and own cybersecurity programs; strong executive communication and presentation skills.
• Commercial awareness and a solution-oriented mindset.

Advantageous qualifications

• UAE/GCC regulatory exposure is a major advantage.
• Relevant certifications may include CISSP, CISM, CRISC, CCISO, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, or other relevant cybersecurity and risk certifications.

Engagement and location

• Dubai/UAE is preferred; exceptional international candidates may also be considered.
• Full-time, fractional, and specialist engagement models may be available depending on experience and client requirements.
• The successful candidate works directly with regulated businesses on licensing, operational readiness, governance, regulatory compliance, and growth.