ZipRecruiter

Log In

1

Virtual Chief Information Security Officer Jobs (NOW HIRING)

Sciens Building Solutions

NY · On-site

Chief Information Security Officer page is loaded## Chief Information Security Officerlocations: FL - State-wide Remoteposted on: Posted Todayjob requisition id: R-100797**CHIEF INFORMATION SECURITY ...

Availity, LLC

Chief Information Security Officer

Availity is seeking a Chief Information Security Officer to lead the company's enterprise ... Secure Availity's highly virtual and international operating model, including teams outside the ...

Availity

Chief Information Security Officer

Availity is seeking a Chief Information Security Officer to lead the company's enterprise ... Secure Availity's highly virtual and international operating model, including teams outside the ...

previous pagenext page

Showing results 21-40

All JobsChief Information Security Officer JobsVirtual Chief Information Security Officer Jobs

Virtual Chief Information Security Officer information

See salary details

$70K

$148.7K

$232.5K

How much do virtual chief information security officer jobs pay per year?

As of Aug 17, 2026, the average yearly pay for virtual chief information security officer in the United States is $148,746.00, according to ZipRecruiter salary data. Most workers in this role earn between $118,000.00 and $167,500.00 per year, depending on experience, location, and employer.

What is a virtual chief information security officer?

A Virtual Chief Information Security Officer (vCISO) is an outsourced security executive who provides an organization with the expertise and strategic guidance of a traditional Chief Information Security Officer, but on a flexible, part-time, or remote basis. vCISOs help organizations develop and manage their information security strategies, ensure compliance with regulations, and oversee risk management without the cost of hiring a full-time executive. This service is particularly popular among small and medium-sized businesses that need high-level security leadership but may not have the resources to support a full-time CISO.

How does a virtual chief information security officer typically collaborate with internal IT teams and external stakeholders?

A Virtual Chief Information Security Officer (vCISO) works closely with internal IT teams to assess security risks, develop policies, and ensure compliance with relevant regulations. They often serve as the bridge between executive leadership, technical staff, and sometimes third-party vendors, translating complex security requirements into actionable plans. Regular meetings, security training sessions, and incident response drills are common ways a vCISO fosters collaboration. Additionally, vCISOs may advise on vendor selection and coordinate with external auditors to ensure robust security measures are in place.

What are the key skills and qualifications needed to thrive as a virtual chief information security officer, and why are they important?

To thrive as a Virtual Chief Information Security Officer (vCISO), you need deep expertise in cybersecurity frameworks, risk management, and regulatory compliance, often supported by certifications such as CISSP, CISM, or CISA. Familiarity with security information and event management (SIEM) tools, cloud security platforms, and enterprise risk assessment systems is typically required. Outstanding communication, leadership, and strategic thinking skills are crucial for guiding organizations and collaborating with stakeholders remotely. These competencies ensure effective protection of digital assets and drive security initiatives that align with business goals in a dynamic threat landscape.

What is the difference between Virtual Chief Information Security Officer vs Cybersecurity Consultant?

AspectVirtual Chief Information Security OfficerCybersecurity Consultant
CredentialsTypically holds certifications like CISSP, CISM, or CISAOften certified as CISSP, CEH, or GIAC
Work EnvironmentWorks remotely or on-site with executive teams, focusing on strategic security leadershipProvides project-based or advisory services, often on a contract basis
Employer & Industry UsageUsed by organizations needing ongoing security leadership, especially in finance, healthcare, and techHired by companies for specific security assessments, audits, or implementations

The Virtual Chief Information Security Officer and Cybersecurity Consultant both possess relevant certifications and work in security roles, but the VCISO provides ongoing strategic leadership at the executive level, while the cybersecurity consultant offers specialized, project-based expertise. Organizations choose between them based on their need for continuous security oversight versus specific security projects.

More about Virtual Chief Information Security Officer jobs

What cities are hiring for Virtual Chief Information Security Officer jobs?

Cities with the most Virtual Chief Information Security Officer job openings:

What are the most commonly searched types of Chief Information Security Officer jobs?

The most popular types of Chief Information Security Officer jobs are:

What states have the most Virtual Chief Information Security Officer jobs?

States with the most job openings for Virtual Chief Information Security Officer jobs include:

What job categories do people searching Virtual Chief Information Security Officer jobs look for?

The top searched job categories for Virtual Chief Information Security Officer jobs are:

Virtual Chief Information Security Officer jobs near you
Infographic showing various Virtual Chief Information Security Officer job openings in the United States as of August 2026, with employment types broken down into 1% As Needed, 74% Full Time, 22% Part Time, and 3% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $148,746 per year, or $71.5 per hour.

Chief Information Security Officer

Lancaster County

Lancaster, PA • On-site

$103K - $154K/yr

Full-time

Medical, Retirement, PTO

Posted 4 days ago

Job description

Compensation Range:
$103,077.00 - $154,596.00
Our full-time positions come with an array of excellent benefits including comprehensive healthcare coverage, a pension plan, flexible spending accounts and even a tuition reimbursement program.
At Lancaster County, we understand the importance of work-life balance. That's why we offer paid time off for sick, vacation and holidays, an employee assistance program, and family medical leave.
If you're passionate about making a difference, apply today to join us in serving the community!
Job Description:
JOB SUMMARY
  • The Chief Information Security Officer (CISO) provides strategic leadership and oversight of the County's enterprise cybersecurity, information security, risk management, and cyber resilience programs. Working closely with the CIO and Deputy CIO, the CISO is responsible for protecting County information, technology systems, networks, applications, cloud services, and other digital assets from cybersecurity threats and ensuring appropriate safeguards are established across County operations.
  • The CISO develops and maintains Countywide cybersecurity policies, standards, and security architecture; assesses and manages cybersecurity risk; oversees vulnerability management and security monitoring; directs cybersecurity incident response; evaluates third-party and emerging technology risks; and advises County leadership regarding cybersecurity threats, risks, regulatory requirements, and recommended mitigation strategies.
  • The position provides leadership and oversight for compliance with applicable cybersecurity, privacy, and information-protection requirements, including CJIS, HIPAA, and other federal, state, and local requirements. The CISO also develops and oversees the Countywide security awareness and training program and coordinates cybersecurity activities with County departments, technology providers, government partners, law enforcement, and other external organizations.
  • The CISO provides cybersecurity oversight for the County's business continuity and disaster recovery programs and coordinates with County departments to promote organizational resilience and continuity of critical technology services.
  • This position is designated essential and may be required to respond to cybersecurity incidents, technology outages, natural disasters, or other emergencies outside normal business hours and when County offices are closed.

REPORTING RELATIONSHIPS
  • The Chief Information Security Officer supervises a staff of Security Technicians, Systems & Security Engineers, and IT Security Analysts.
  • The Chief Information Security Officer reports directly to the Chief Information Officer.

ESSENTIAL JOB FUNCTIONS
  • Develop, implement, maintain, and enforce Countywide cybersecurity and information security policies, standards, procedures, and technical security requirements consistent with the strategic direction established by the CIO.
  • Lead the County's cybersecurity and information security program, including security governance, risk management, security architecture, vulnerability management, threat detection, incident response, identity and access security, data protection, and security awareness.
  • Identify, assess, prioritize, and communicate cybersecurity risks and vulnerabilities and coordinate appropriate mitigation, remediation, or risk acceptance with IT leadership, County departments, and other stakeholders.
  • Direct and coordinate the County's response to cybersecurity incidents, including investigation, containment, recovery, documentation, notification, and coordination with executive leadership, law enforcement, government partners, insurers, and other external organizations as appropriate.
  • Provide leadership and oversight for compliance with applicable cybersecurity, privacy, and information-protection requirements, including CJIS, HIPAA, and other federal, state, and local requirements.
  • Develop, implement, and maintain a Countywide cybersecurity, privacy, and HIPAA security awareness and training program, including phishing preparedness and role-based security education.
  • Establish security requirements and provide cybersecurity review and guidance for new systems, applications, cloud services, infrastructure, integrations, and emerging technologies, including artificial intelligence.
  • Oversee third-party cybersecurity risk, including security assessments of vendors, contractors, hosted services, and technology providers and the development and review of appropriate contractual security requirements.
  • Develop and maintain cybersecurity incident response plans and provide security oversight and coordination for IT disaster recovery, business continuity, and cyber-resilience planning.
  • Monitor the County's cybersecurity posture through security monitoring, vulnerability assessments, audits, penetration testing, threat intelligence, and other appropriate security assessments.
  • Establish cybersecurity metrics and reporting and regularly advise the CIO, Deputy CIO, and other County leadership regarding cybersecurity posture, significant risks, threats, incidents, compliance, and remediation efforts.
  • Coordinate cybersecurity initiatives and information sharing with federal, state, and local government partners and other appropriate cybersecurity and law-enforcement organizations.
  • Evaluate emerging cybersecurity threats, technologies, industry practices, and regulatory changes and recommend appropriate changes to County security strategy, architecture, policies, and controls.
  • Provide leadership, direction, mentoring, and technical guidance to cybersecurity personnel and other IT staff and promote security awareness and accountability throughout the organization.
  • Develop and administer cybersecurity-related budgets, contracts, services, and technology investments consistent with organizational priorities and available resources.
  • Manage and direct cybersecurity contractors, consultants, service providers, and vendors and monitor their performance and compliance with County requirements.
  • Participate in strategic planning and collaborate with IT leadership to ensure cybersecurity requirements are appropriately incorporated into County technology strategy, projects, and operations.
  • Perform other duties as assigned and provide leadership during cybersecurity incidents, technology emergencies, and other events requiring an IT security response.

OTHER SPECIFIC TASKS OR DUTIES
  • Perform other duties, tasks and special projects as required.

MINIMUM QUALIFICATIONS
  • Completion of a Bachelor's Degree in Computer Science, or related field, and a minimum of seven (7) years experience in the Information Technology field or;
  • Associate's Degree in Computer Science, or related field, and a minimum of nine (9) years experience in Information Technology field or;
  • Any equivalent combination of relevant education, experience, and training is acceptable.
  • At least one (1) year of management/leadership experience that included strategic planning, resource allocation, production methods, and coordination of people and resources, or; Any equivalent combination of education and experience.

KNOWLEDGE, SKILLS AND ABILITIES
  • Comprehensive knowledge of information security principles, frameworks, controls, and risk management practices, including the NIST Cybersecurity Framework (CSF) and other recognized government and industry cybersecurity standards.
  • Knowledge of applicable cybersecurity, privacy, and regulatory requirements and standards, including NIST guidance, CJIS Security Policy, HIPAA, and other federal, state, and local government requirements.
  • Knowledge of security architecture, identity and access management, network security, endpoint security, vulnerability management, incident response, and data protection.
  • Knowledge of business continuity, disaster recovery, and cyber incident preparedness and response.
  • Knowledge of current and emerging technologies, cybersecurity threats, vulnerabilities, and attack techniques.
  • Strong analytical, risk-assessment, problem-solving, and decision-making skills.
  • Ability to develop and maintain information security policies, standards, procedures, and security awareness programs.
  • Ability to appropriately manage highly confidential, sensitive, and security-related information.
  • Ability to communicate complex cybersecurity risks and recommendations effectively to technical staff, executive leadership, elected officials, department leadership, and other non-technical stakeholders.
  • Ability to lead, mentor, and provide technical and strategic direction to staff.
  • Ability to coordinate cybersecurity activities across County departments and with vendors, contractors, law enforcement, and external partners.
  • Ability to independently prioritize competing security risks and operational requirements while supporting County business needs.
  • Strong written and verbal communication, organizational, leadership, and interpersonal skills.

REQUIRED LICENSES/CERTIFICATIONS/CLEARANCES
  • Valid driver's license and acceptable driving record in accordance with County policy
  • Acceptable pre-employment criminal background check.
  • CISM (or equivalent - Preferred after 1 year of employment)

PHYSICAL REQUIREMENTS/WORK ENVIRONMENT
  • Work is primarily sedentary in nature.
  • No special demands are required.

The County of Lancaster offers comprehensive benefits to our employees. Read more about our benefits here.
Lancaster County Government provides Equal Employment Opportunity for all persons regardless of race, religion, age, sex, national origin, genetic information or disability. The County also observes all applicable laws regarding Veterans status. The County reflects this action in all areas of employment and compensation practices and policies. Employment with the County is based upon the ability to perform the job as well as dependability and reliability once an individual is hired.

Apply