Senior VCISO

At VC3 , we don’t just solve IT problems — we own them. We serve hundreds of municipalities and organizations across the United States and Canada, bringing IT to the people who need it most. We believe in earning trust, having a growth mindset, and delivering excellence every single time. We're a team of doers, builders, and tech whisperers who live by 4 core values:
Go Beyond | Own It | Be Curious | Serve as One We pride ourselves on making IT personal, making IT easy, and getting IT right. And it all starts with our talented team that is committed to raising the bar. The Impact you will have:

The Virtual Chief Information Security Officer(vCISO) will provide strategic leadership and oversight for the information security programs of VC3 managed clients. This role involves having a deep understanding of each client’s unique business environment to develop tailored strategies that mitigate risks and align with client business objectives. The vCISO is a top security expert that works with existing management and technical teams both within client environments and VC3 . This role also assists in providing strategy for the Managed Security space to drive growth, delivery with consistency and excellence, and the desired level of profitability for the organization. Key focus areas are innovation, staying at or ahead of world events that are relevant, consistent excellence, proactiveness, and driving efficiency. By measuring progress and adjusting processes accordingly, the vCISO keeps the clients under their purview on track.

The Managed Security department at VC3 is responsible for ensuring our clients have the right security tools, policies and processes to thrive in today’s fast-moving threat landscape. They ensure that our internal teams are equipped with the training and knowledge to support our clients and make sure that effective security is a key aspect of everything we do within VC3 .

In order to ensure an exceptional result, you will need to have a clear understanding of the challenges and opportunities our clients face and how our teams as a whole combine to deliver our promise. Providing services in a proactive, professional manner while ensuring key parties are kept informed is critical. We are a data driven company and analysis for decision making and overall strategy is ongoing.

What you will be doing:

The “ VC3 Way” is our set of people, process and technology, that produce a predictable result for our clients. You must be aware of, and maintain this standard, understanding that it is a living guide; Always updating and always changing based on influence from our team and the needs of our clients.

Responsibilities:

- Risk Assessment and Management:
- Utilizing principles from a formal framework (such as RMF as an example) create a roadmap for our clients

- Assist in driving risk assessments for various projects and business processes.

- Assist in the development and implementation of risk mitigation strategies.

- For clients that contract for that level of service, maintain and update a risk register to reflect current status and changes.

- Assist in overseeing risk assessments and mitigation strategies for clients as assigned and VC3 when asked

- Compliance Activities:
- Advise clients on adhering to published polices and legal standards.

- Prepare and manage documentation for compliance activities, such as audits, controls, and compliance checks.

- Monitor changes in relevant legislation and the regulatory environment and take appropriate actions.

- For clients that contract the proper level of service, maintain the GRC platform and collaborate with the client on pursuing their GRC goals for alignment (vs compliance)

- Record, manage, and analyze compliance data to support reporting and decision-making.

- Develop and maintain comprehensive documentation of compliance and risk management activities.

- Prepare regular reports on compliance and risk status for senior managemen