vCISO
3 months ago
About AccessIT Group:
AccessIT Group is a specialized cybersecurity solutions provider offering a full range of advanced security services that assist organizations with the design, implementation and operation of their security program and infrastructure. We focus on cloud, risk management, compliance and implementation services, working with organizations to address the evolving complexities of cyberthreats. With over 20 years of experience and relationships with leading technology partners, we help customers find the most appropriate technologies for implementation into their IT environments.
Job Description:
We are seeking a highly skilled and experienced Virtual Chief Information Security Officer (vCISO) to join our team. As a vCISO, you will be responsible for providing strategic leadership and guidance in the development, implementation, and management of our organization's information security program. This is a remote position, offering flexibility and the opportunity to work with a diverse range of clients.
Key Responsibilities:
- Develop and execute a comprehensive information security strategy aligned with business objectives and industry best practices.
- Provide expert guidance and oversight in the design and implementation of security policies, standards, and procedures.
- Assess and mitigate security risks through proactive identification, analysis, and remediation of vulnerabilities.
- Collaborate with internal teams and external partners to ensure compliance with relevant regulations and standards, such as GDPR, HIPAA, PCI DSS, and ISO 27001.
- Lead incident response and security incident management efforts, including investigations, communication, and recovery.
- Stay abreast of emerging threats and security technologies and provide recommendations for continuous improvement.
- Act as a trusted advisor to executive leadership, providing regular updates and reports on the organization's security posture and risk management.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, or a related field. Master's degree preferred.
- Proven experience in a senior information security role, with a minimum of 10 years in cybersecurity and 5 years in a leadership position.
- Strong understanding of risk management, compliance, and governance frameworks
- Expertise in security architecture, network security, cloud security, and application security.
- Industry certifications such as CISSP, CISM, CISA, or equivalent.
- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.
- NERC CIP experience.
- Experience working in a virtual or remote capacity is a plus.