vCISO

Thrive

4d

About The Position

Work with Thrive’s vCISO Service clients to assess their current Information Security Program and develop an appropriate, business-aligned strategy for proactive cyber risk management. Implement customized, risk-based Information Security Programs and associated controls frameworks that complement each client’s business and IT operations. Ensure Governance, Regulatory, and Compliance obligations are addressed from an Information Security perspective. Serve as a trusted advisor and go-to resource for senior IT and executive leadership on Information Security.

Requirements

• Bachelor’s degree or equivalent work experience in cybersecurity.
• Five or more years of Information Security experience preferred.
• Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification.
• Expertise in security frameworks such as CIS, NIST, CMMC, HIPAA/HITECH, PCI-DSS, and ISO 27001/2.

Nice To Haves

• MBA preferred.

Responsibilities

• Serve as an Information Security subject matter expert for executive leadership.
• Develop annual strategic plans and supporting project roadmaps.
• Collaborate and coordinate with internal IT resources to execute the security plan.
• Create remediation plans for security assessments.
• Conduct annual risk assessments.
• Coordinate penetration tests with third parties.
• Collaborate with customers on policy development and implementation.
• Assist with security incident response and tabletop exercises.
• Mentor client technical resources as requested.
• Perform client assessments in Information Security Strategy, Information Security Governance, Information Security Program Development and Management, and Information Security Risk Management.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior