vCISO

vCISO

Department: Professional Services

Employment Type: Full Time

Location: Remote

Description

Company Background
With 30 years of experience in cyber defense, DeepSeas is trusted by nearly 1,000 clients around the world, including Fortune 100 enterprises and mid-market organizations, higher education institutions, municipality and local governments, and federal agencies. Known for its programmatic approach to continuously transforming cyber defense programs, DeepSeas is recognized by Gartner as a top 40 provider of MDR and ranked as a top 5 MDR leader in the 2024 Frost Radar™: Global Managed Detection and Response (MDR) Market. In addition to its industry-leading MDR service, DeepSeas offers a full suite of advisory, compliance, and testing services to support clients on their cybersecurity transformation journeys, with an approach to cyber defense that prioritizes technical expertise, tradecraft, and continuous innovation to deliver unparalleled results.

Position Overview
DeepSeas is a dynamic and growing organization that is seeking a Virtual Chief Information Security Officer (vCISO) to support our growing client base. As a vCISO, you will work part-time or on a contract basis to develop and implement a comprehensive security strategy that aligns with our business goals and objectives.

Key Responsibilities

• Develop and implement a comprehensive information security strategy that aligns with the company’s goals and objectives.
• Provide guidance and oversight to the organization’s IT and security staff, including monitoring and assessing risks, identifying vulnerabilities, and ensuring compliance with relevant regulations and standards.
• Establish and maintain effective relationships with key stakeholders, including executive leadership, external partners, and regulatory bodies.
• Develop and oversee incident response plans and procedures, including coordinating with internal and external teams to investigate and respond to security incidents.
• Conduct regular security assessments and audits to identify potential vulnerabilities and recommend remediation measures. Monitor emerging trends and best practices in information security to ensure the company’s security program remains up-to-date and effective.
• Serve as a subject matter expert on information security and provide guidance and advice to the organization’s leadership team.

Skills Knowledge and Expertise

Skills, Knowledge and Expertise
• Bachelor’s degree in information security, computer science, or a related field.
• Several years of experience in information security, including experience in a leadership role.
• Certification in relevant information security standards, such as CISSP, CISM, or CRISC.
• 10+ years of progressive GRC and Security Engineering experience. 
• Strong communication and leadership skills.
• Experience with risk management, incident response, and regulatory compliance.
• Experience working with cloud-based environments and technologies.
• Experience working in a consulting or virtual capacity.
• If you are a highly skilled and experienced vCISO looking for a new challenge, we would like to hear from you.

Why DeepSeas?

At DeepSeas, we like to say that heart rates go down, careers take off, and security programs mature. Our values provide the ultimate guide for our daily behavior and decisions. Without these values, we aren’t DeepSeas. They preserve the essence of our organization, reflect the personalities of our Deeps (how we affectionately refer to our teammates), and enable us to exceed expectations. Our values are:
 
· We are client obsessed.
· We stand in solidarity with our teammates.
· We prioritize personal health and well-being.
· We believe in the power of diversity.
· We solve hard problems at the speed of cyber.
 
This is your chance to join a supportive crew of teammates and an industry-leading organization that values opportunities for growth. If DeepSeas sounds like a good fit for you, send us your resume and let’s talk!

Information security is everyone’s responsibility:
• Understanding and following DeepSeas’s information security policies and procedures.
• Remaining vigilant and reporting any suspicious activity or possible weaknesses in DeepSeas’s information security.
• Actively participating in DeepSeas’s efforts to maintain and improve information
• security.
• DeepSeas considers this position is as Moderate Risk with a potential to
• view/access/download restricted/private client/internal data. This information must be treated with
• sensitivity and in the most secure manner. HR reserves the right to perform random background/drug
• screens to ensure the safety of client/DeepSeas data