Fractional CISO

Strategic Growth Partners

1d•$150,000 - $180,000•Remote

About The Position

Strategic Growth Partners (SGP) is seeking an experienced Fractional CISO to serve as the senior information security and compliance leader for both SGP and its client organizations. This full-time, remote position reports to the Chief Information Officer and involves strategic cybersecurity leadership, hands-on compliance advisory, and scalable client delivery. The role requires working closely with client executives, internal IT teams, compliance partners, and business development.

Requirements

Bachelor's degree in cybersecurity, information technology, risk management, or a related field, or an equivalent combination of education and relevant experience.
At least 8 years of information security experience, including senior leadership experience as a Security Director, Vice President, CISO, or vCISO.
Hands-on expertise with NIST SP 800-171 and 800-53, CMMC Levels 1 and 2, ISO/IEC 27001, risk assessments, SSPs, POA&Ms, and compliance documentation.
Proven ability to lead multiple client engagements simultaneously, communicate effectively with executives, produce strong technical documentation, conduct assessments, and translate security requirements into practical business actions.
Executive-level written and verbal communication.
Strategic security leadership paired with hands-on compliance execution.
Strong organizational and time-management skills across multiple client engagements.
Sound judgment, discretion, risk-based decision-making, and practical problem-solving.
Ability to maintain confidential and regulated information.
Ability to work independently and collaboratively with clients, internal teams, and external assessment partners.
Commitment to consistent, professional, and scalable client service.

Nice To Haves

CISSP, CISM, or Certified CISO (CCISO) certification.
ISO/IEC 27001 Lead Implementer or Lead Auditor certification.
CMMC CCP or CCA certification.
CRISC or CISA certification.
Consulting, MSP/MSSP, or professional-services experience.
CMMI experience, including process appraisal, improvement, or implementation.
Experience managing subcontractors or a distributed advisory team.
Relevant industry certifications are strongly preferred.

Responsibilities

Serve as acting CISO for multiple client organizations, including SGP, providing strategic security leadership and executive guidance.
Lead cybersecurity and compliance programs aligned with NIST SP 800-171 and 800-53, CMMC Levels 1 and 2, and ISO/IEC 27001.
Conduct security assessments, gap analyses, and risk reviews; develop System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), policies, and audit evidence.
Guide clients through certification, audit, and assessment-readiness activities, coordinating with C3PAO and RPO partners as needed.
Own and maintain SGP's internal compliance posture, applying the same standards delivered to clients.
Oversee incident response planning, vulnerability management, and security operations in partnership with IT teams.
Deliver executive reporting, security roadmaps, metrics, and board-ready presentations.
Coordinate security awareness training and tabletop exercises for SGP staff and clients.
Review technology and business initiatives, including ERP and business intelligence projects, for security and compliance impact.
Recruit and manage a bench of subcontracted vCISOs as the practice scales, ensuring consistent delivery quality.
Partner with business development on proposals, scoping, and client engagement growth.
Build reusable templates and methodologies to scale SGP's cybersecurity and GRC practice.
Maintain and coordinate Cyber Security compliance calendar activities including security self-assessments and security related internal audit activities.
Actively monitors threat information from key sources and partners (CISA, FBI, SOC/NOC) and escalates and educates as appropriate to the internal teams and executive leadership.
Monitor ongoing and proposed changes to major Compliance and Control frameworks.
Perform other duties as assigned.