VCISO Advisor

Primary Responsibilities: Work closely with the Program Director to support successful program execution and delivery. Provide executive-level cybersecurity guidance and board-level advisory support to client organizations. Develop and maintain cybersecurity roadmaps that prioritize security improvements based on organizational risk, operational needs, and available resources. Support the development and execution of cybersecurity tabletop exercises and organizational readiness activities. Review, develop, and provide guidance on cybersecurity policies, strategies, and governance practices. Support incident response planning, preparedness, and management activities. Provide guidance related to cybersecurity training, assessments, and organizational security awareness. Support cybersecurity compliance and risk-management activities, including the identification, prioritization, and communication of organizational risks. Assist in the development and refinement of vCISO client service packages, processes, and supporting materials. Manage broad-scope objectives and help define repeatable processes for delivering vCISO services. Interpret applicable healthcare cybersecurity policies, regulations, and compliance requirements and translate them into governance, risk-management, and security-planning recommendations. Maintain accurate records and appropriately handle sensitive or confidential information. Perform other duties as assigned by Project Director.

Skills and Competencies: Strong organizational skills and attention to detail, with a commitment to accurate recordkeeping, secure information handling, and consistent and timely follow-through. Ability to manage competing priorities and operate effectively in a dynamic, evolving work environment. Strong ability to communicate cybersecurity risks, priorities, and recommendations to executive, technical, and nontechnical audiences. Excellent verbal and written communication skills, including the ability to develop clear executive-level guidance and recommendations. Strong understanding of cybersecurity governance, risk management, incident preparedness, and security strategy. Ability to interpret healthcare cybersecurity policies, regulations, and compliance requirements and understand their operational implications. Ability to translate technical cybersecurity findings into actionable organizational priorities and long-term security improvements. Ability to manage broad objectives, establish priorities, and develop processes in areas where requirements may not be fully defined. Ability to work independently, exercise sound judgment, and identify and execute tasks based on broadly defined objectives. Bachelor's degree with 10+ years of relevant experience.