Virtual CISO Cybersecurity Program Lead
Anuraag S.United StatesSENIORPosted 14d ago
NIST CSF 2.0NIST 800-53NIST 800-171FERPAGLBA Safeguards RulePCI DSSMicrosoft 365AzureIncident ResponseCISSPCISM
About the Role
We are seeking a seasoned Virtual CISO (vCISO) to lead a higher-education cybersecurity program, overseeing strategy, risk management, policy development, and incident readiness.
Key Responsibilities
• Develop and implement comprehensive cybersecurity strategy and risk management frameworks
• Establish and maintain security policies and procedures aligned with NIST standards and regulatory requirements
• Lead incident response efforts for critical security events
• Provide expert guidance to executive leadership and the board on cybersecurity matters
• Mentor and guide security team members
Requirements
• 15+ years of experience in cybersecurity, with 7+ years as CISO or vCISO
• Deep expertise in NIST CSF 2.0, NIST 800-53/800-171, FERPA, GLBA Safeguards Rule, and PCI DSS
• Proven experience maturing security programs in Microsoft 365 and Azure environments
• Demonstrated incident response experience, including ransomware and BEC scenarios
• Exceptional communication skills with the ability to engage with board and executive teams
• CISSP or CISM certification required
Benefits
• 36-month contract with potential for extensions
• Remote work with quarterly onsite visits
• 0.3-0.4 FTE with 24/7 on-call escalation for critical incidents