Virtual Chief Information Security Officer – Security Director

This is a fully remote position, open to applicants in India.

📋 Description

• Develop the comprehensive enterprise cybersecurity strategy and create information security roadmaps, resource allocation models, and technology modernization objectives.

• Act as the chief security liaison for the C-suite and Board of Directors.

• Convert technological vulnerabilities into operational risk frameworks and strategic business decisions.

• Oversee corporate security investment structures and budgets.

• Evaluate technical vendor choices, assess ROI on security measures, and monitor margins of third-party service delivery.

• Lead high-level incident command response protocols during significant security incidents.

• Coordinate communications among legal, public relations, technical, and executive teams.

• Implement organizational compliance governance frameworks.

• Ensure protective standards align with SEC requirements, global operational privacy regulations, and local industry certifications.

• Mentor and support interdisciplinary cybersecurity implementation teams.

• Establish career advancement objectives, performance indicators, and technical competency requirements for security leaders.

• Facilitate cross-departmental enterprise crisis threat management drills.

• Evaluate internal detection systems, continuity strategies, and recovery processes.

⛳️ Requirements

• Over 12 years of overall experience.

• More than 6 years of focused executive cybersecurity leadership and corporate strategy development experience.

• 5 to 8 years of fundamental cybersecurity systems engineering experience.

• At least 4 years dedicated to managing complex post-breach digital forensic investigations.

• Required certification: Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP).

• Required certification: GCFA, GCIH, or CCE.

• Strong technical expertise in advanced forensic software environments, including EnCase, FTK, Volatility, and X-Ways Forensics.

• Experience with memory acquisition tools and packet analysis software.

• Comprehensive knowledge of NTFS, EXT4, and FAT file systems.

• Familiarity with operating system log frameworks, network-layer packet capture analysis, and malware persistence techniques.

• Preferred: Experience with ransomware negotiations or high-stakes ransomware containment operations.

• Preferred: Proficiency in Python or Perl scripting for custom string-searching queries or parsing non-standard database application trace files.

• Preferred: CGEIT or CRISC certification.

• Preferred: Experience with post-merger information platform integrations or corporate equity restructuring efforts.

🏝️ Benefits

• 12+ years of comprehensive IT software engineering or operational management experience, including 6+ years in roles such as CISO, Director of Security, or Principal Enterprise GRC Advisor.

• Strong visionary understanding of contemporary security trends, zero-trust frameworks, risk assessment methodologies, and multi-cloud information landscape dynamics.

• Exceptional communication skills, evidenced by a successful track record in negotiating security budgets, guiding board discussions, and managing high-pressure public communications.

• Required certification: CISM or CISSP.

• Preferred: CGEIT or CRISC certification.

• Preferred: Experience in leading complex post-merger information platform integrations or enhancing security postures during significant corporate equity restructurings.