Virtual Chief Information Security Officer

Job Summary

To oversee and enhance information security and compliance, the part-time Virtual Chief Information Security Officer (vCISO) will manage security strategies, IT operations, and vendor risk management while working remotely within a healthcare organization.

Key responsibilities

• Own the strategy and implementation of the information security and compliance program, ensuring HIPAA compliance and readiness for SOC 2 certification
• Manage IT operations, including oversight of an IT MSP or MSSP, and improve security controls across SaaS vendors and IT systems
• Conduct security reviews of third-party vendors and maintain necessary security documentation and compliance artifacts

Required qualifications

• 7+ years of experience in information security, IT administration, compliance, or related roles
• Experience serving as a vCISO or senior security consultant
• Strong knowledge of HIPAA Security Rule requirements and healthcare security best practices
• Experience preparing organizations for SOC 2 audits and compliance frameworks
• Hands-on experience with Google Workspace and cloud-based technology environments