Virtual Chief Information Security Officer - vCISO

RSI Security

26d • Remote

About The Position

RSI Security is a leading cybersecurity compliance firm that specializes in providing comprehensive security assessment, advisory, and technical security testing services. We support organizations in navigating the complex cybersecurity landscape, ensuring they achieve and maintain compliance while managing risks effectively. Position Summary: Apply consultative and leadership skills to build high rapport with RSI customers and team members. Perform an expert security advisory role to clients and provide leadership for compliance and security program oversight to RSI customer executives including kickoff/status meetings, report presentations, remediation planning, and ongoing SME guidance.

Requirements

• Proven experience (10+ years) in a senior information security role, such as CISO, vCISO, or Director of Information Security, preferably within a consulting or client-facing environment.
• Deep knowledge of cybersecurity frameworks, standards, and regulations (e.g., PCI, CMMC, NIST, ISO 27001, SOC 2, etc.).
• Strong understanding of risk management, threat analysis, and incident response.
• Excellent leadership and communication skills, with the ability to interact effectively with C-level executives and boards.
• Experience in developing and executing cybersecurity strategies for organizations of various sizes and industries.
• Ability to work independently and manage multiple client engagements simultaneously.
• Bachelor’s degree in Information Security, Computer Science, or a related field.

Nice To Haves

• Relevant certifications (e.g., CISSP, CISM, CISA, CRISC) are highly desirable.
• A Master’s degree or MBA is a plus

Responsibilities

• Lead development of security strategy aligned to client business goals and risk appetite.
• Guide risk management practices including risk registers, threat modeling, and treatment plans.
• Provide executive-level oversight of regulatory compliance programs (e.g., PCI, NIST, HIPAA, etc.).
• Act as incident response advisor during major events, supporting containment and recovery planning.
• Offer technical insight into security architecture decisions, vendor evaluations, and tool selection.

What This Job Offers

• Job Type: Part-time
• Career Level: Mid Level
• Number of Employees: 11-50 employees