Virtual Chief Information Security Officer (vCISO), Cybersecurity Program Lead

Job overview

The Virtual Chief Information Security Officer (vCISO) role is remote across the United States, with quarterly onsite visits and onsite presence during major incidents if needed; compensation is not specified. The role leads Western Wyoming Community College's cybersecurity program, reporting to the Fractional CIO and overseeing security leads while mentoring the college's information security analyst.

What you'll do

• Lead cybersecurity discovery and assessment, establish a security baseline and NIST CSF 2.0 maturity score, and review existing tools and assessments
• produce a 90-day plan and three-year roadmap
• recommend and govern the security monitoring model
• own risk assessment, mitigation planning, the cyber risk register, and annual risk reporting
• develop and approve cybersecurity policies
• own incident response planning and serve as incident commander for major incidents
• coordinate with college leadership, legal counsel, the cyber insurance carrier, and law enforcement
• oversee GLBA and FERPA safeguards and compliance support
• lead security awareness
• advise on disaster recovery, business continuity, cloud security, and vendor risk
• present security posture to leadership and the Board.

What we're looking for

Skills & competencies

virtual ciso

cybersecurity program lead

remote us

quarterly onsite visits

western wyoming community college

nist csf 2.0

incident response

risk management

microsoft 365

cissp

cism

24/7 on-call escalation

Work arrangement

• Weekend coverage required

Why this role

The role is 0.3–0.4 FTE and includes 24/7 on-call escalation for critical incidents. Requires 15 years in cybersecurity, including seven years leading security programs as a CISO or vCISO; CISSP or CISM is required.

About the employer

Abacus Service Corporation is hiring for this role. Industry: Colleges, Universities, and Professional Schools. Sector: 61.