Note: The job is a remote job and is open to candidates in USA. RegalSentry is a cybersecurity and compliance firm seeking senior security consultants for contract virtual Chief Information Security Officer (vCISO) positions. The role owns security programs end to end, including GRC platform administration, framework strategy, audits, risk assessments, remediation, executive reporting, control implementation, and security documentation.
Responsibilities
- Own security programs end to end: assessment, roadmap, execution, reporting
- Run the GRC platform yourself: connectors, monitoring tests, evidence, personnel tracking
- Set framework strategy and carry programs through audit
- Run risk assessments and drive remediation with stakeholders
- Report to executives and boards, and interface with vendors, auditors, and insurers
- Work hands-on with IT on control implementation when the program calls for it
- Generate, update, review, manage, and maintain documentation including, but not limited to, policies, procedures, standards, plans, and diagrams
Skills
- 10+ years across security engineering, architecture, and leadership
- At least 4 years in a management role in a cyber position, corporate or Big 4
- CISSP or CISM
- Hands-on administration of a GRC platform (connectors, tests, evidence). Tooling could include Drata, Vanta, Secureframe, ZenGRC, or other provider
- Deep experience with one or more frameworks (SOC 2, ISO 27001, NIST CSF, or HIPAA) with hands-on work
- Familiar using Frontier AI models, embedded or through chat assist
- CISA or CRISC
- ISO 27001 Lead Implementer or Lead Auditor
- GIAC leadership-track certifications or SANS coursework
- Cloud depth across AWS, Azure, or GCP, plus on-prem Active Directory
- Experience standing up a security program from zero
- Bachelors or Master degree in IT, Cybersecurity, Development, or other technical field
Benefits
- Remote work arrangement
- C2C opportunity available
Company Overview