Virtual Chief Information Security Officer

Grey Doc Solutions LLC is a technology and security consulting firm that supports organizations in protecting their information assets and digital operations. The company focuses on helping clients design and maintain secure, resilient environments that meet regulatory, compliance, and business requirements. Grey Doc Solutions LLC works with a variety of industries, providing tailored cybersecurity strategies and governance frameworks. Team members collaborate remotely with clients and colleagues, using modern tools and methodologies to deliver practical, results-oriented solutions.

The Virtual Chief Information Security Officer (vCISO) is a remote, contract role responsible for leading information security strategy and governance for client organizations. In this role, you will assess current security postures, develop and maintain security policies and standards, and guide the implementation of cybersecurity controls across applications, infrastructure, and cloud environments. You will oversee risk assessments, advise on regulatory and compliance requirements, and support incident response planning and coordination when security events occur.

Day-to-day tasks include meeting with client leadership, presenting security roadmaps, collaborating with technical teams to remediate vulnerabilities, and ensuring that business continuity and disaster recovery plans are aligned with organizational objectives. You will also provide ongoing guidance on security best practices, metrics, and reporting to help clients make informed decisions about their security investments.

• Strong expertise in Information Security Management and Information Security, with experience developing policies, standards, and governance frameworks.
• Hands-on experience in Cybersecurity, including risk assessment, threat modeling, security architecture, and incident response.
• Proficiency in Application Security, including secure development practices, code review, and vulnerability management for web and mobile applications.
• Knowledge of Business Continuity planning, disaster recovery strategies, and resilience measures for critical systems and data.
• Experience advising executive leadership and technical teams, with the ability to communicate complex security topics to non-technical stakeholders.
• Familiarity with common security frameworks and regulations (e.g., NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, or similar) relevant to client industries.
• Proven ability to work independently in a remote, consulting capacity, managing multiple client engagements and priorities.
• Relevant professional certifications (e.g., CISSP, CISM, CISA, CCSP, or equivalent) are highly beneficial.
• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.