vCISO – Privacy Advisory Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the creation and execution of privacy compliance frameworks, including CCPA/CPRA, GDPR, SOC 2 Privacy, and ISO 27701.

• Perform privacy gap assessments, evaluate client environments, map data flows, and outline necessary remediation actions.

• Deliver strategic vCISO leadership and oversight.

• Create cybersecurity maturity roadmaps and provide guidance on risk mitigation and incident response planning.

• Assist clients in developing and refining their policies and procedures.

• Ensure that technical documentation aligns with compliance requirements and organizational standards.

• Support client managers in scoping discussions, proposal contributions, and providing subject matter expertise.

• Keep abreast of the latest security frameworks, regulatory developments, and industry best practices.

• Advise client stakeholders on privacy strategies, security controls, and data protection measures.

⛳️ Requirements

• At least 5 years of experience in IT.

• A minimum of 3 years in vCISO advisory roles with a strong emphasis on privacy regulations.

• CISM, CISSP, or CISA certification is mandatory.

• In-depth knowledge of security controls, data protection architecture, and risk management principles.

• Capability to convert cloud, network, and application environments into strategic privacy and security recommendations.

• Demonstrated ability to lead advisory engagements, cultivate client relationships, and achieve strategic results punctually.

• Excellent written and verbal communication skills.

• Experience with PSA or project management tools such as Monday.com, Asana, Mavenlink, or similar platforms is preferred.

• Familiarity with CCPA/CPRA, GDPR, SOC 2 Privacy, ISO 27701, FedRAMP, CMMC, NIST, PCI DSS, and HITRUST.

• IAPP certifications such as CIPP/US or CIPM, ISO 27701 Lead Auditor certification, QSA or other audit certifications, and extensive audit experience is preferred.

• Must be based in the United States and authorized to work without current or future sponsorship.

• Comfortable operating as a 1099 contractor in a part-time, project-based capacity.

🏝️ Benefits

• Fully remote work environment.

• Minimal travel requirements; travel is rare and typically not necessary.

• Opportunities for professional growth.

• Exposure to complex and evolving regulatory landscapes.

• Options to broaden expertise across various domains.

• Collaborative, remote-first work culture.

• Commitment to continuous improvement and operational excellence.