Part-Time vCISO

About the Role

We are seeking an experienced and client-focused Virtual Chief Information Security Officer (vCISO) to join our professional services delivery team on a part-time basis. In this role, you will serve as an embedded security executive for multiple client engagements simultaneously, delivering strategic cybersecurity leadership, risk management, and compliance guidance on behalf of our firm.

This is a part-time position that provides the benefits of team collaboration, and consistent client delivery infrastructure, while offering the flexibility appropriate to a fractional executive role. You will represent our brand and values directly in front of client stakeholders, from technical teams to C-suite and board-level audiences.

Key Responsibilities

• Serve as the primary strategic security advisor for an assigned portfolio of client accounts, acting as a trusted extension of each client's leadership team


• Develop, refine, and maintain each client's information security program, including security policies, standards, procedures, and roadmaps aligned to their business objectives


• Lead risk assessments and threat modeling exercises; deliver actionable risk registers and executive-ready risk reports


• Guide clients through compliance and/or certification initiatives including AICPA SOC 2, ISO 27001, CMMC, NIST RMF, NIST CSF, and applicable state and federal regulations


• Provide board-level and executive reporting on security posture, program maturity, and risk exposure


• Oversee and advise on vendor risk management, third-party assessments, and supply chain security


• Lead and coordinate incident response planning, tabletop exercises, and post-incident reviews when applicable


• Collaborate with internal delivery team members to ensure seamless service execution across engagements


• Stay current on the evolving threat landscape, regulatory developments, and emerging security technologies relevant to client industries

Qualifications

• 10+ years of progressive experience in information security, with at least 3-5 years in a leadership or CISO-equivalent role


• Deep knowledge of major compliance frameworks: AICPA SOC 2, NIST RMF, NIST CSF, ISO 27001, , CMMC,


• Strong executive communication skills — ability to translate technical risk into business language for boards, C-suites, and non-technical stakeholders


• Experience with GRC platforms, vulnerability management tools, SIEM/SOAR solutions, and cloud security architecture


• Ability to manage multiple concurrent client engagements while maintaining quality and responsiveness


• Proven ability to build trust and long-term advisory relationships with client organizations


• Self-directed and entrepreneurial mindset with strong organizational and time management discipline

Preferred Certifications

• CISSP — Certified Information Systems Security Professional


• CISM — Certified Information Security Manager


• CRISC — Certified in Risk and Information Systems Control


• CCA – CMMC Certified Assessor

What We Offer

• Flexible, part-time schedule designed to accommodate fractional executive-level workloads


• Access to Elysian resources, tools, templates, and a collaborative ProServices delivery team


• Opportunity to expand your client portfolio and professional network under an established brand


• Collaborative team culture with peer practitioners across cybersecurity and IT services disciplines

Requirements

• Ability to obtain and maintain a security clearance.