Senior VCISO

Department: Technology Operations

Employment Type: Full Time

Location: Canada - Remote

Reporting To: John Hey

Description

What you will be doing:

• Understand and follow “The VC3 Way”.  This is our set of standards and processes that produce a predictable result for the client.  You must be aware of and maintain our standards. 
• Engage and provide consulting services to mid-market and enterprise clients, including: 
  • Provide strategic leadership in translating complex cybersecurity concepts into non-technical terms for clients to clearly understand specific applications to their business priorities. 
  • Understand and align with the client organization’s overall strategy and business environment to ensure cybersecurity initiatives support business objectives 
  • Lead the development and implementation of a comprehensive cybersecurity strategy for clients and VC3 that aligns with the organization’s goals and objectives 
  • Proactively identify and anticipate future security and compliance challenges for our clients and VC3, driving VC3 solutions 
  • Partner with cross-functional teams to integrate security into product design and implementation, and to develop security solution offerings for clients. 
  • Drive the creation and execution of a robust cybersecurity plan and program within client environments, ensuring alignment with industry best practices. 
  • Assist in the development of the information security incident response program for the VC3 Managed Security Department. 
  • Strategically develop and enhance client specific incident response programs as needed based on the development of Business Continuity and Disaster Recovery practices liaising with internal VC3 Departments as necessary. 
  • Lead comprehensive cybersecurity risk assessments based on the client organization’s assets, identify vulnerabilities, and recommend remediation strategies. 
  • Collaborate within VC3 and with clients to assist with vendor selection, providing guidance and checklists to ensure third party security compliance. 
• Engage and provide services to VC3 as an organization, including: 
  • Security Strategy & Vision: 
  • Develop and implement a comprehensive information security strategy for internal operations and client-facing services. 
  • Collaborate with senior management to align security initiatives with business objectives and regularly report on the status of security programs and initiatives. 
  • Drive the adoption of security policies, standards, and guidelines that protect the company and its clients. 
• Risk Management: 
  • Identify, evaluate, and report on information security risks in a manner that meets compliance and regulatory requirements. 
  • Oversee risk assessments and mitigation strategies for both internal environments. 
• Compliance & Regulatory Oversight: 
  • Ensure the organization complies with all relevant regulations, standards, and certifications (e.g., SOC II, FISMA, NIST). 
  • Lead audits and assessments to maintain compliance and certification standards. 
• Incident Response & Management: 
  • Establish and oversee the organization’s incident response program, including detection, investigation, and remediation of security incidents. 
  • Coordinate with legal, public relations, and other relevant teams to manage communication during and after a security breach. 
  • Post-incident, lead efforts to identify root causes and implement changes to prevent future incidents. 

• Foster a security-conscious culture across the organization, ensuring all employees understand their role in protecting information. 
• Serve as the security spokesperson to clients, partners, and regulatory bodies. 
• Proactively engage with industry peers and continuously analyze and review new security technologies and understand emerging security threats while implementing proactive measures to mitigate potential risks. 
• Strategically collaborate with internal stakeholders to stay informed of planned changes to technologies, practices, and business activities that could impact security. 
• Collaborate across all VC3 departments to maximize our client security posture and experience during onboarding, system design, strategy and ongoing support 
• Maintain precise and up-to-date timesheets, and document notes on troubleshooting steps and client communications. 
• Actively seek and reflect on feedback from stakeholders, colleagues, and management using it to drive improvement. 
• Escalate complex issues to senior resources or relevant teams when necessary. 
• Engage actively in team huddles, L10 meetings, and other collaboratively structured meetings. 
• Develop and revise documentation promptly to reflect changes or new findings. 
• Attend company-based meetings as required 
• Additional duties as assigned 

• Client & VC3 Cyber Security Incidents 
• Client Utilization 
• Security MRR Growth 
• Client & VC3 Security Awareness Education 

The tools you bring:

• Bachelor’s Degree or Master’s Degree (preferred) in an IT-based curriculum, or at least 10 years’ experience in risk management, information security, or programming. 
• One or more of the following qualifications: Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information systems Auditor (CISA), or Certified Risk & Information Security Controls (CRISC), Cisco Certified Internetwork Expert (CCIE) or equivalent 
• Extensive experience in cybersecurity strategy development, risk management, and program administration. 
• Deep knowledge of current   common cybersecurity frameworks (CIS, NIST, MITRE ATT&CK) 
• Expertise in compliance and regulatory requirements across various industries. 
• An understanding of SIEM platforms, perimeter security, endpoint detection and response platforms, vulnerability management solutions, all aspects of IT infrastructure (compute, route/switch, security) and cloud security 
• Possesses a high level of self-motivation and initiative, consistently taking ownership of tasks and projects. 
• Demonstrate a strong sense of autonomy and resourcefulness, capable of making independent decisions and solving problems without relying heavily on coaching or direction. 
• Exhibit excellent time management and organizational skills, effectively prioritizing tasks and allocating resources to meet deadlines and achieve objectives without extensive oversight. 
• Displays a proactive and self-directed approach to learning and staying updated on industry trends, seeking out relevant information and resources to enhance their knowledge and skills. 
• Shows the ability to adapt and thrive in ambiguous or uncertain situations, quickly assessing and navigating challenges. 
• Possesses strong critical thinking and decision-making abilities, evaluating complex situations and determining the best course of action, while considering the broader organizational goals and objectives. 
• Demonstrates effective communication skills, both written and verbal, articulating ideas and expectations clearly and concisely, minimizing the need for frequent guidance or clarification. 
• Demonstrated ability to build and manage relationships with clients (internal and external) through consistent and proactive communication. 
• Extraordinarily strong interpersonal skills, able to build effective working relationships, solicit co-operation and collaborate with various stakeholders internally and externally. 

• Applicant selected will be subject to a criminal and department of motor vehicles background checks and must meet Criminal Justice Information Systems (CJIS) requirements post-employment. 
• Available for domestic and international travel as required. 

What's in it for you: