Client Security Strategist (vCSO)

We are seeking an experienced and strategic Client Security Strategist (vCSO) to lead and oversee NetGain contractual clientele’s cybersecurity program. The vCSO will be responsible for developing security strategies, advising leadership on risk management, ensuring compliance with relevant standards, and helping protect the organization’s systems, networks, data, and operations.

This role is ideal for a security professional who can combine hands-on technical knowledge with executive-level guidance and business alignment.

Key Responsibilities

• Develop, implement, and maintain the organization’s cybersecurity strategy, policies, and procedures
• Assess security posture and identify gaps, vulnerabilities, and areas for improvement
• Advise executive leadership on cybersecurity risks, incident preparedness, and security investments
• Oversee risk assessments, security audits, and remediation planning
• Guide security governance, compliance, and regulatory readiness efforts
• Support incident response planning, breach response coordination, and post-incident analysis
• Monitor emerging threats and recommend appropriate controls and mitigation strategies
• Collaborate with IT, legal, compliance, and operational teams to align security with business objectives
• Review third-party/vendor security risks and recommend safeguards
• Help define and maintain business continuity and disaster recovery security considerations
• Prepare reports, dashboards, and executive briefings on security performance and risk status
• Promote security awareness and best practices across the organization

• Minimum of 2 years of experience in IT security, cybersecurity, information security, or a related field
• Experience in security governance, risk management, compliance, and incident response
• Strong knowledge of network security, endpoint protection, identity and access management, cloud security, and security frameworks
• Demonstrated ability to communicate technical security concepts to non-technical stakeholders and executive leadership
• Experience developing security policies, standards, and strategic roadmaps
• Strong analytical, organizational, and problem-solving skills
• Ability to work independently in a virtual or fractional leadership capacity

Candidates must hold at least one of the following certifications:

• SSCP (Systems Security Certified Practitioner), or a comparable cybersecurity certification

• Experience serving as a vCISO, vCSO, Security Manager, or Information Security Consultant
• Familiarity with compliance standards such as NIST, ISO 27001, SOC 2, HIPAA, GLBA, or CMMC
• Experience with cloud environments such as AWS, Azure, or Google Cloud
• Relevant advanced certifications such as CISSP, CISM, CRISC, or CISA
• Experience in regulated industries or working with small to mid-sized businesses

• Bachelor’s degree in information security, Cybersecurity, Computer Science, Information Technology, or a related field preferred
• Equivalent professional experience may be considered in lieu of formal education

• Remote/Virtual with some onsite work required (clientele mostly resides in the Arkansas (Little Rock) area.
• Full-time

A successful vCSO will provide practical and strategic security leadership, strengthen the organization’s security posture, reduce risk exposure, and help ensure the business is prepared for evolving cyber threats.