Virtual Chief Information Security Officer (vCISO) / Security Director

This is a remote position. Virtual Chief Information Security Officer (vCISO) / Security Director Job Details Employment Type: Contract Work Mode: Remote Location: Offshore Total Experience Required: 12+ years Relevant Experience Required: 6+ years of dedicated executive cybersecurity leadership and corporate strategy design experience Mandatory Certification: Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) Job Summary We are seeking an experienced vCISO / Security Director to serve as a senior strategic advisor and lead our comprehensive enterprise information security program.

The ideal candidate will govern multi-million dollar security budgets, define long-term corporate security roadmaps, present risk posture profiles directly to C-suite executives, and align security architecture goals to power ongoing business enablement.

Key Responsibilities

Formulate the overarching enterprise cybersecurity strategy , establishing a mature information security roadmap, resource distribution models, and technology modernization goals. Serve as the primary security representative to the C-suite and Board of Directors , translating complex technological vulnerabilities into high-impact operational risk matrices and strategic business trade-offs.

Govern corporate security investment architectures and budgets , reviewing technical vendor selections, validating ROI on protection layers, and tracking third-party service delivery margins. Direct high-level incident command response frameworks , orchestrating communication lines across corporate legal, public relations, technical, and executive tracks during critical security events.

Enforce absolute organizational compliance governance structures , validating that systemic protective standards meet active SEC mandates, global operational privacy acts, and local industry certifications. Mentor and guide multidisciplinary cybersecurity execution divisions , defining career growth targets, performance measurement metrics, and technical skill requirements for security leaders.

Lead cross-functional enterprise crisis threat management simulations , pressure-testing internal detection frameworks, continuity mechanics, and recovery pipelines.

Requirements

5 to 8 years of core cybersecurity systems engineering experience, with 4+ dedicated years actively running complex post-breach digital forensic track assessments. Strong technical mastery of advanced forensic software environments (e.g., En. Case, FTK, Volatility, X-Ways Forensics), memory acquisition tools, and packet analysis suites.

Deep structural understanding of file system layout matrices (NTFS, EXT4, FAT), operating system log architectures, network layer packet capture parsing, and malware persistence mechanics. Mandatory certification: GCFA, GCIH, or CCE.

Preferred Qualifications

Prior experience dealing with ransomware negotiations or navigating high-stakes ransomware containment events under tight timeline expectations. Scripting background in Python or Perl used to build custom string searching queries or parse non-standard database application trace files.

Benefits

12+ years of total IT software engineering or operational management background, with 6+ dedicated years acting as a CISO, Director of Security, or Principal Enterprise GRC Advisor. Strong visionary mastery of modern security trends, zero-trust target states, risk calculation paradigms, and multi-cloud information landscape parameters.

Deep communication execution skills , with a proven history of negotiating security budgets, steering board panels, and handling high-pressure public communication events. Mandatory certification: CISM or CISSP.

Preferred Qualifications

Certified in the Governance of Enterprise IT (CGEIT) or Certified in Risk and Information Systems Control (CRISC) credential. Prior experience steering complex post-merger information platform integrations or stabilizing security posture profiles during major corporate equity restructurings.