Senior Virtual CISO

Location Type

• Full Remote
• The Senior Virtual Chief Information Security Officer (Sr vCISO) serves as a trusted executive advisor to Marco clients, delivering strategic security leadership across both recurring consulting engagements and complex, point-in-time initiatives. This role partners directly with executive leadership and senior IT management to design, mature, and operationalize enterprise-level information security programs aligned to business objectives, regulatory requirements, and risk tolerance. The Sr vCISO acts as part of the client's executive team, offering CISO-level leadership, translating cybersecurity risks into business impacts, and guiding security investment decisions. This role demands expertise in cybersecurity governance, risk management, and compliance, as well as the ability to influence board and C-suite outcomes. ESSENTIAL FUNCTIONS:
• Lead high-impact, complex consulting engagements that require senior-level judgment, strategic planning, and executive communication.
• Develop long-term consulting relationships with clients enrolled in a recurring consulting services program.
• Review the client’s current security and service management program and assist with developing program maturity.
• Identify gaps in current solutions and practices and build a corresponding roadmap that can be communicated to key stakeholders within the organization.
• Serve as the client’s virtual CISO, participating in executive and board-level discussions.
• Assess clients’ current security posture, governance models, and risk management practices, and lead the development of multi-year security maturity roadmaps.
• Advise and lead security risk assessments, helping clients understand and manage enterprise risk.
• Guide clients through compliance and framework alignment efforts (e.g., NIST CSF, CIS, ISO, HIPAA, CMMC, PCI), as applicable.
• Participate as a member of the client’s change advisory board and act as an emergency change approver.
• Provide strategic oversight and prioritization for client IT and security initiatives to ensure alignment with business objectives.
• Coordinate and advise on vendor-specific partnerships and third-party risk considerations.
• Assist with client’s annual security and technology budgeting, forecasting, and investment prioritization.