Virtual Chief Information Security Officer
● cloudIT ● Phoenix, AZ ● In-Office
Phoenix's small and mid-sized businesses face the same cybersecurity threats as the Fortune 500 but with a fraction of the resources. cloudIT bridges that gap. We are a growing Technology Service Provider built on the belief that every business deserves enterprise-grade security expertise, regardless of size. We are looking for a strategic, people-first vCISO to champion that mission across our client base.
About the Role
As a vCISO at cloudIT, you will serve as a fractional security leader for a portfolio of clients who do not have and cannot afford a full-time CISO. You will work from our Phoenix office, managing multiple client relationships simultaneously, building practical security programs around cloudIT's proven security stack. This role is equal parts strategist, communicator, and trusted advisor.
What You Will Do
Security Strategy and Leadership
•Develop and own practical, business-aligned security roadmaps built on cloudIT's security stack•Present security posture updates to IT leaders and business owners in clear, actionable terms•Track emerging threats and regulatory shifts across healthcare, real estate, financial services, and constructionRisk Management
•Conduct risk and vulnerability assessments calibrated to client environments•Prioritize remediation based on business impact, not just severity scores•Build realistic risk treatment plans clients can actually executeCompliance and Governance
•Guide clients through HIPAA, PCI-DSS, CMMC, NIST CSF, and other relevant frameworks•Develop right-sized policies and procedures that are actionable, not shelf-ware•Conduct periodic audits and gap assessments using cloudIT's toolsetIncident Response and Management
•Build and test incident response plans suited to SMB realities•Lead response coordination during incidents, keeping stakeholders informed•Drive post-incident improvements supported by cloudIT's monitoring capabilitiesSecurity Stack Adoption and Technical Oversight
•Champion cloudIT's stack including MDR, SIEM, endpoint protection, MFA, and cloud security controls•Ensure solutions are implemented correctly and delivering measurable value•Assess third-party vendor risk and guide secure procurement decisionsClient Relationship Management
•Manage a portfolio of clients, engaging at the right level for each organization•Show up as a trusted partner by proactively communicating risks and celebrating wins•Translate complex security concepts into plain language across industries and experience levelsWhat You Bring
•5+ years in information security, with at least 2 years in a leadership or advisory capacity•Ability to engage effectively with both IT leaders and non-technical business owners•Comfort managing multiple client engagements with competing priorities•Experience working with or for an MSP or TSP is a strong plusPreferred Certifications
CISSPCISMCISACCACCPFramework Knowledge
NIST CSFISO 27001HIPAAPCI-DSSCMMCWhat We Offer
Health BenefitsMedical, dental, and visionRetirement401(k) with company matchProfessional DevelopmentCertification sponsorship and continuing educationReady to elevate security for Phoenix's businesses?
If you want to be part of a team that is genuinely changing how businesses think about security, we want to hear from you.
Skills Required
- 5+ years of experience in information security
- At least 2 years in a leadership or advisory capacity
- Ability to engage effectively with IT leaders and non-technical business owners
- Ability to manage multiple client engagements with competing priorities
- Knowledge of NIST CSF, ISO 27001, HIPAA, PCI-DSS, and CMMC
- Experience working with or for an MSP or TSP
- CISSP certification
- CISM certification
- CISA certification
- CCA certification
- CCP certification
What We Do
We believe our client’s technology needs are fluid and do not fit into a rigid box, just as our company is difficult to classify under one type of acronym such as MSP, CSP, or VAR. That being said, cloudIT would best be described as a TSP – Technology Services Provider. Within this umbrella we excel in delivering managed/outsourced IT services, custom built cloud solutions, as well as consulting in hardware integration and procurement as a value add to our clients. We find that out of the many organizations that offer a similar line or mix of services, our approach of building true technology partnerships with our clients allows us to be pro-active in our mission – Utilizing technology to improve business processes and application delivery!
