• You guide strategy

• You oversee quality

• You mentor and support VISOs

• You build client confidence at the executive level

Responsibilities:

• Provide CISO-level advisory guidance to Assura clients
• Oversee and mentor Virtual ISOs (VISOs) delivering day-to-day GRC work
• Review deliverables for accuracy, completeness, and real-world applicability
• Act as a senior escalation point for complex client questions
• Translate regulatory and technical requirements into clear, practical guidance
• Support scope expansion conversations when new client needs emerge
• Help evolve Assura’s GRC methodologies, templates, and service offerings

Qualifications:

• Strong experience with NIST frameworks (800-53, 800-171, CSF)
• SEC 530 familiarity (Virginia Information Security Standard) strongly preferred
• Prior consulting or advisory experience
• Ability to communicate confidently with executives and boards
• Excellent writing and documentation skills
• Technical literacy sufficient to advise on controls (without implementing)

Required Skills:

• Strong experience with NIST frameworks (800-53, 800-171, CSF)
• SEC 530 familiarity (Virginia Information Security Standard) strongly preferred
• Prior consulting or advisory experience
• Ability to communicate confidently with executives and boards
• Excellent writing and documentation skills
• Technical literacy sufficient to advise on controls (without implementing)

Preferred Skills:

• ISO, HIPAA, PCI exposure
• SLED experience outside Virginia
• Familiarity with GRC tools (e.g., Trastero)
• Experience mentoring junior practitioners

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.