Full-Time Virtual Chief Information Security Officer (vCISO)

Your CareerOur leading consultancy seeks a dynamic and visionary vCISO to champion and operationalize cybersecurity best practices for a key public sector client. This crucial role will act as an account CISO and requires a trusted advisor who can effectively engage with client stakeholders (including CISOs, security teams, IT management, and executive leadership) across the account. The vCISO will primarily be responsible for the delivery of security services as part of a large-scale transformation programme and will also be required to identify and develop additional opportunities within the broader client organization. This position requires a seasoned cybersecurity professional eager to influence client outcomes and drive meaningful improvements to their security posture. This role is key in managing and reducing operational security risks for our public sector clients to acceptable levels by leading remediation programs and guiding the implementation of appropriate security controls. The vCISO will serve as the primary point of contact for all client cybersecurity matters and requires a broad understanding of security control implementation within various corporate environments. Success in this role hinges on exceptional relationship management skills and the ability to drive adoption of recommended security solutions within the client organization.

Your Impact

1. Client Engagement and Programme Delivery:Serve as a trusted security advisor to client stakeholders, including CISOs, security teams, IT management, and executive leadership. Work with different delivery partners across a complex product and service ecosystem to pragmatically manage risk and drive successful outcomes. Develop and own the programme delivery and security services operational risk register.Develop deep, trusted relationships across the client organization, fostering open communication and collaboration.Provide strategic guidance and mentorship to client security teams, empowering them to effectively manage security risks.Present security recommendations and findings to various client audiences, tailoring communication to the specific group.Represent our consultancy on client calls and escalations, offering expert security advice and guidance.Champion security best practices within the client organization and drive the adoption of recommended solutions.

• Thought Leadership & Industry Collaboration:Maintain an up-to-date understanding of UK government security policies. Stay abreast of industry best practices, emerging threats, and regulatory changes to provide cutting-edge guidance to clients. Share relevant industry insights and best practices with the client's security team to foster continuous improvement.Support executive engagement / peer relationships across the UK Public Sector and international peers.

• Security Risk Management & Remediation:Conduct cybersecurity risk assessments, vulnerability analyses, and maturity assessments for clients.Develop and implement client-specific cybersecurity roadmaps, strategies, policies, and procedures.Provide expert advice on security architecture, incident response, disaster recovery, and business continuity planning.Oversee and guide client security teams in implementing and managing security controls.Assist clients with compliance requirements related to various regulations (GDPR, CCPA, HIPAA, PCI DSS, etc.) and standards (e.g., ISO 27001, SOC 2).Manage security risk committees to support client cyber risk management practices.Track and manage remediation of security audit and compliance findings for clients.Review security metrics and lead remediation programs within the client's environment.Lead or sponsor client security initiatives.Ensure necessary security controls are in place in conjunction with client data privacy initiatives.

What is the last date for applying to the job?

Which countries are accepted for this remote job?