VCISO Advisor

The Virtual Chief Information Security Officer (vCISO) provides executive-level cybersecurity guidance and strategic advisory services to healthcare organizations. This position supports cybersecurity governance, risk management, compliance, incident response planning, and security strategy development. The vCISO works with organizational leadership to translate technical findings into actionable recommendations, develop security roadmaps, and strengthen long-term cybersecurity resilience. The role requires strong communication skills, independent problem-solving, and the ability to manage broad objectives in a dynamic environment.

This is an on-site position.

• Work closely with the Program Director to support successful program execution and delivery.
• Provide executive-level cybersecurity guidance and board-level advisory support to client organizations.
• Develop and maintain cybersecurity roadmaps that prioritize security improvements based on organizational risk, operational needs, and available resources.
• Support the development and execution of cybersecurity tabletop exercises and organizational readiness activities.
• Review, develop, and provide guidance on cybersecurity policies, strategies, and governance practices.
• Support incident response planning, preparedness, and management activities.
• Provide guidance related to cybersecurity training, assessments, and organizational security awareness.
• Support cybersecurity compliance and risk-management activities, including the identification, prioritization, and communication of organizational risks.
• Assist in the development and refinement of vCISO client service packages, processes, and supporting materials.
• Manage broad-scope objectives and help define repeatable processes for delivering vCISO services.
• Interpret applicable healthcare cybersecurity policies, regulations, and compliance requirements and translate them into governance, risk-management, and security-planning recommendations.
• Maintain accurate records and appropriately handle sensitive or confidential information.
• Perform other duties as assigned by Project Director.

• Strong organizational skills and attention to detail, with a commitment to accurate recordkeeping, secure information handling, and consistent and timely follow-through.
• Ability to manage competing priorities and operate effectively in a dynamic, evolving work environment.
• Strong ability to communicate cybersecurity risks, priorities, and recommendations to executive, technical, and nontechnical audiences.
• Excellent verbal and written communication skills, including the ability to develop clear executive-level guidance and recommendations.
• Strong understanding of cybersecurity governance, risk management, incident preparedness, and security strategy.
• Ability to interpret healthcare cybersecurity policies, regulations, and compliance requirements and understand their operational implications.
• Ability to translate technical cybersecurity findings into actionable organizational priorities and long-term security improvements.
• Ability to manage broad objectives, establish priorities, and develop processes in areas where requirements may not be fully defined.
• Ability to work independently, exercise sound judgment, and identify and execute tasks based on broadly defined objectives.
• Bachelor's degree with 10+ years of relevant experience.