vCISO & Privacy Advisory Consultant

RSI Security•, (Multiple States)

3d•$70 - $90•Remote

About The Position

As a vCISO & Privacy Advisory Consultant, you will lead and support client engagements focused on developing comprehensive privacy strategies, evaluating security controls, and providing strategic vCISO oversight. This role combines strategic advisory, privacy gap analysis, and vCISO support. You will work directly with client stakeholders to design privacy compliance programs, guide organizations toward achieving maturity in frameworks like CCPA/CPRA and GDPR, and provide expert IT security guidance. You will operate with a strong emphasis on privacy by design, technical accuracy, and clear communication, while contributing to RSI's service quality and client success.

Requirements

5+ years of IT experience, with 3+ years specifically in vCISO advisory roles and a heavy focus on Privacy regulations (CCPA/CPRA, GDPR, etc.).
CISM, CISSP, or CISA required.
Deep understanding of security controls, data protection architecture, and risk management principles. Ability to translate technical environments (cloud, network, and application layers) into strategic privacy and security recommendations aligned with regulatory requirements.
Proven ability to lead advisory engagements, manage client relationships, and deliver high-quality strategic results on time.
Strong written and verbal communication skills, with the ability to present complex topics clearly to technical and executive audiences.

Nice To Haves

IAPP certifications (CIPP/US, CIPM) or ISO 27701 Lead Auditor highly preferred.
QSA or other audit certifications are preferred but not required.
Experience with PSA or project management tools such as Monday.com, Asana, Mavenlink, or similar platforms
Proficiency in additional compliance frameworks such as FedRAMP, CMMC, NIST, PCI DSS, and HITRUST.
Additional compliance assessment certifications or extensive audit experience are preferred.

Responsibilities

Develop Privacy Compliance Programs: Lead the development and implementation of privacy frameworks such as CCPA/CPRA, GDPR, SOC 2 Privacy, and ISO 27701, ensuring alignment with regulatory requirements and data protection strategies.
Conduct Privacy Gap Analyses: Perform thorough assessments of client environments to identify privacy gaps, map data flows, and outline remediation actions for both internal and external data.
vCISO Strategic Advisory: Provide high-level leadership and oversight, developing long-term cybersecurity maturity roadmaps and advising on risk mitigation and incident response planning.
Client Documentation & Policy Guidance: Assist clients in the creation and refinement of policies and procedures, ensuring technical documentation effectively reflects compliance requirements and organizational standards.
Pre-Engagement Consultation: Support RSI client managers by assisting in scoping discussions, proposal contributions, and providing subject matter expertise for client engagements.
Methodology & Knowledge Maintenance: Maintain up-to-date knowledge of evolving security frameworks and regulatory landscapes, ensuring all client advisory services reflect current industry best practices.