Chief Information Security Officer

About TechCXO

TechCXO pioneered the fractional executive leadership model. For more than 20 years, we have built a firm designed specifically for accomplished C-suite operators who want both impact and autonomy.

We do not place executives. Our CISO Partners build their own portfolio practices within the TechCXO platform, serving as embedded cybersecurity leaders to growth-stage and middle-market companies.

As a TechCXO CISO Partner, you step into companies as the acting security executive. You work directly with founders, CEOs, boards, and investors to provide strategic leadership and operational execution across cybersecurity, risk, and compliance.

You control the clients you serve and the work you take on. At the same time, you are part of a national partnership of experienced peers who collaborate across Technology, Finance, Revenue Growth, Executive Operations, and HR. This is not employment. It is a Partner model for executives who want to build and grow a practice within an established firm.

The Opportunity

As a TechCXO CISO Partner, you will:

• Serve as the embedded cybersecurity leader for multiple growth-stage companies
• Advise founders, CEOs, boards, and investors on security strategy, privacy, and compliance direction
• Lead governance, risk management, and security architecture decisions across the client's technology environment
• Install the cybersecurity infrastructure, processes, and talent that support the execution and operations of a mature security program
• Originate and build client relationships in your market
• Collaborate across TechCXO practices, including Finance, Revenue Growth, Executive Leadership, and Human Capital

What This Role Really Requires

This role is best suited for CISOs who:

• Have already operated at the C-level
• Are comfortable building their own book of business and have operated fractionally
• Want autonomy without isolation
• Prefer execution over theory
• Have credibility with investors, boards, and IT and security teams

You are not joining a bench waiting for assignments. You are building a practice within a platform.

Core Responsibilities

Responsibilities vary by engagement and may include any or all of the following:

Cybersecurity Strategy & Executive Leadership

• Define and own cybersecurity strategy and multi-year roadmap aligned to business and risk priorities
• Serve as the named security executive for boards, investors, and senior leadership teams
• Advise founders and boards on security risk, investment, and tradeoffs, translating technical risk into business language
• Design and facilitate cybersecurity steering committees and governance structures
• Align security priorities with business objectives, growth plans, and go-to-market priorities
• Advise boards and leadership teams on AI governance, data privacy, and emerging technology risk

Security Program Design & Technical Oversight

• Design and oversee security architecture, controls, and infrastructure to improve performance, availability, and resilience
• Establish security standards, policies, and operating practices across the organization
• Lead or oversee vulnerability management, penetration testing, and security assessments to identify and close gaps
• Direct incident response planning, playbook development, and disaster recovery/business continuity programs
• Ensure security architecture and controls align with applicable regulatory and industry frameworks
• Assess security and data privacy risk associated with AI/ML adoption and integration
• Lead technical and cyber risk due diligence for M&A, fundraising, and exit transactions
• Assess and remediate security debt and scalability gaps ahead of transactions, and prepare security programs for investor or acquirer scrutiny

Team & Organization Building

• Build, structure, and scale security and IT teams as companies grow
• Recruit, mentor, and develop security leadership and key technical talent
• Lead status meetings and updates for executive teams, boards, and key stakeholders

Risk & Compliance

• Design and manage enterprise risk management programs, including ongoing risk register maintenance
• Lead compliance program management across applicable frameworks (SOC 2, CMMC, HIPAA, PCI, ISO 27001, etc.)
• Advise on data privacy program requirements and obligations across applicable regulations (e.g., GDPR, CCPA)
• Design and oversee vendor and third-party risk management programs
• Develo