Chief Information Security Officer

Cyber Security Consultant (CISO-Level) — Remote, USA

We're working with a growing technology integrator to find a strategic, hands-on security leader to serve as an advisory CISO across their client portfolio. This is an opportunity to operate at the strategic altitude of a Chief Information Security Officer — shaping security strategy, governance, and roadmaps for multiple organizations — without the day-to-day operational ownership of running a single internal program.

Location: Remote, anywhere in the US

Compensation: $200K\+ (flexible, based on experience)

What you'll do:

• Develop and advise on enterprise-wide information security strategies, policies, and frameworks aligned with business objectives and risk appetite
• Lead comprehensive risk assessments across IT, cloud, OT, and third-party ecosystems, prioritizing remediation by business impact
• Advise on compliance with NIST CSF, ISO 27001, SOC 2, GDPR, HIPAA, PCI-DSS, and other industry-specific regulations
• Evaluate and guide secure network, cloud, application, and identity architecture
• Lead or advise on incident response planning, tabletop exercises, breach investigations, and post-incident remediation
• Translate technical risk into business language for C-suite executives and boards; present security posture, roadmaps, and investment justification
• Benchmark security programs against maturity models and deliver actionable improvement roadmaps
• Assess third-party and supply chain risk, and guide vendor security requirements
• Champion security awareness and culture through training and policy enforcement
• Mentor internal security teams and support succession planning

What you bring:

• 10\+ years of progressive experience in cybersecurity, information security, or IT risk management, including senior leadership roles (CISO, Deputy CISO, Head of Security, or equivalent)
• A track record of building or transforming enterprise security programs from the ground up or through major maturity uplift
• Deep knowledge of NIST, ISO 27001/27002, and CIS Controls, plus relevant regulatory frameworks
• Strong grounding in cloud security (AWS, Azure, GCP), network security, IAM, and application security
• Experience with risk quantification, security budgeting, and business case development
• Excellent executive communication skills — you're comfortable presenting to boards and non-technical stakeholders
• Experience leading incident response, including coordination with legal, PR, and law enforcement
• Familiarity with SIEM, EDR/XDR, vulnerability management, DLP, and CSPM tooling

Nice to have:

• CISSP, CISM, CRISC, CCISO, or equivalent certification
• Prior experience as a fractional/advisory CISO or in a consulting capacity across multiple clients
• Industry-specific expertise (financial services, healthcare, critical infrastructure, government)
• M\&A security due diligence experience
• Background spanning both offensive and defensive security
• Advanced degree in cybersecurity, computer science, or related field