Fractional CISO

Responsibilities

• Serve as acting CISO for multiple client organizations and SGP, providing strategic security leadership
• Lead cybersecurity and compliance programs aligned with NIST SP 800-171, 800-53, CMMC, and ISO/IEC 27001
• Conduct security assessments, gap analyses, and risk reviews
• Develop System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and policies
• Own and maintain SGP's internal compliance posture
• Oversee incident response planning, vulnerability management, and security operations
• Deliver executive reporting, security roadmaps, and board-ready presentations
• Recruit and manage a bench of subcontracted vCISOs as the practice scales
• Partner with business development on proposals and client engagement growth

Requirements

• Bachelor's degree in cybersecurity, IT, risk management, or equivalent experience
• At least 8 years of information security experience, including senior leadership roles
• Hands-on expertise with NIST SP 800-171, 800-53, CMMC Levels 1 and 2, and ISO/IEC 27001
• Proven ability to lead multiple client engagements simultaneously
• Strong technical documentation and executive communication skills

Preferred Qualifications

• CISSP, CISM, or Certified CISO (CCISO) certification
• ISO/IEC 27001 Lead Implementer or Lead Auditor certification
• CMMC CCP or CCA certification
• CRISC or CISA certification
• Consulting, MSP/MSSP, or professional-services experience
• CMMI experience in process appraisal or implementation

About the Company

Strategic Growth Partners (SGP) provides robust services to clients across multiple time zones and fosters a collaborative, innovative, and diverse work environment committed to data confidentiality.