VCISO

** Location Requirement:
We are only considering candidates who are currently located in Washington, Oregon, Idaho, Colorado, Florida, North Carolina, Texas, or Arizona, or who are willing to relocate to one of these states. If you do not currently reside in one of these states and are not willing to relocate, please do not apply.

As a modern technology consulting firm, ISO is at the forefront of change. We strengthen our clients with technology solutions that help them boost performance, streamline processes, and excel at serving their clients.

With ISO, you’ll join a profitable, established company with over 500 clients throughout the Western United States.

You can expect a fun, energetic, fast-paced environment where you are encouraged to bring your ideas and expertise, focus on our clients, try new things, and learn from mistakes and successes.

We’re looking for an experienced Virtual Chief Information Security Officer (vCISO) to help our clients build stronger, smarter cybersecurity programs.

As a vCISO, you’ll serve as a trusted advisor to client leadership, helping turn complex security, risk, and compliance needs into practical strategies and clear roadmaps. You’ll guide cybersecurity planning, governance, risk management, and compliance while helping clients continuously improve their security posture.

You’ll also collaborate across ISOutsource on cybersecurity assessments, GRC initiatives, Sales Engineering opportunities, and strategic conversations with clients and prospects.

• We areclient centric.
• We are innovative.
• We are results driven.
• We pursue excellence.
• We are trustworthy.
• Weempower our team.

• Access to Management and Senior Leadership.
• Autonomy of schedule.
• Ability to define your own niche within the organization.
• Exposure to a wide range of technologies.
• Monthly training and career enhancing opportunities.
• Being part of a highly skilled team who is willing to help and share knowledge.
• Tons of room for growth, ISO has a long history of promoting from within.
• A company emphasis on work/life balance.

• Excellent total compensation package
• A salary range of $155,000 to $210,000 annualized
• Achievable quarterly bonuses.
• Competitive insurance benefits package includes health, dental, vision, life, disability coverage.
• 401(k) & Employer match
• Generous Paid Time Off schedule
• Parking and mileage reimbursement
• Stocked snacks, sodas, coffee, and lots of treats (including healthy alternatives)
• Monthly team activities include trivia nights, holiday parties and more.

• Provide executive-level cybersecurity consulting and strategic guidance to clients.
• Develop and manage cybersecurity roadmaps, security programs, and Information Security Management Systems (ISMS).
• Lead cybersecurity governance, risk assessments, gap analyses, risk registers, remediation priorities, and security steering committee discussions.
• Guide clients through regulatory, contractual, and framework requirements, including NIST, CMMC, HIPAA, PCI DSS, SOC 2, cyber insurance, and other applicable standards.
• Support audit readiness, compliance assessments, cybersecurity questionnaires, and annual attestations.
• Advise on vulnerability management, third-party risk, privileged access, and other security posture improvement initiatives.
• Lead incident response planning, tabletop exercises, emerging-threat response, and provide strategic guidance during cybersecurity incidents.
• Prepare and present cybersecurity program updates, trends, risks, priorities, and recommendations to client leadership.
• Partner with internal technical and client-facing teams to turn cybersecurity strategy into action.
• Support cybersecurity assessments, proposals, Sales…