Built by practitioners. Hiring the same.
vCISO.com is building a small bench of senior operators. The work is part-time and per-engagement, not salaried. If you run your own practice and want high-quality overflow alongside it, or you want ground-floor standing in a growing firm, this is the right home.
What we are hiring for
No full-time salaried roles today. As retainer volume grows, bench associates get first look at principal roles.
Associate vCISO (Bench)
Part-time, 1099, Remote · Per-engagement revenue share + named-backup retainer
For senior practitioners with 10+ years of security leadership who keep their own practice and want steady, high-quality overflow. You serve as the named designated backup on active client engagements, take delivery work as it comes (policy authoring, audit prep, customer questionnaires, tabletop exercises), and lead engagements under the vCISO.com brand as volume grows. You have owned a SOC 2 or ISO 27001 audit as the accountable party, and you can pass reference checks with people who watched you do it. No exclusivity; keep your own clients. Vetting includes references, an NDA, and a non-solicit.
GRC Delivery Lead
Per-engagement contract, Remote · Day rate, scoped per engagement
Execute SOC 2, ISO 27001, and HIPAA readiness work under a principal vCISO: compliance platform operations (Vanta, Drata, Thoropass), evidence collection, policy drafts, and questionnaire responses. You have done this end to end before and can author real policies rather than recycle templates.
Write us anyway.
If you are a senior operator doing interesting work, we want to hear from you even if the role is not posted.
info@vciso.com