vCISO Analyst | Hybrid | 20% Night Diff

Our client is seeking a highly motivated, detail-oriented vCISO Analyst to support the DenSecure team. This execution-focused role handles recurring operational tasks, enabling vCISO Associates and Senior Associates to focus on strategy and client relationships. It is an excellent entry point into cybersecurity consulting with growth opportunities toward a client-facing vCISO Associate role.

Responsibilities

• Support multiple client engagements and ensure security program activities stay on schedule.
• Collect, review, and summarize security metrics (KPIs/KRIs) and trends.
• Gather and validate data from clients, GRC platforms, and scanning tools for risk assessments.
• Assist with risk assessments using frameworks such as NIST CSF 2.0, ISO 27001, SOC 2, HIPAA, PCI DSS, and GLBA/FFIEC.
• Support vendor risk management by tracking questionnaires, reviewing security documentation, and identifying gaps.
• Maintain risk registers, control evidence, and compliance documentation in GRC platforms.
• Draft status reports, update memos, and executive summaries for review.
• Monitor regulatory updates, cybersecurity threats, and industry trends relevant to clients.
• Assist with incident response documentation and tabletop exercises.
• Maintain organized, audit-ready records across client portfolios.

Qualifications

• 3-5 years of experience in IT, information security, IT audit, or a related field.
• Foundational knowledge of information security and frameworks such as NIST CSF or ISO 27001.
• Exposure to compliance frameworks (SOC 2, PCI DSS, HIPAA, GLBA/FFIEC) is a plus.
• Experience with or willingness to learn GRC/compliance platforms (e.g., Vanta, Drata, CyberSaint, ProcessUnity, OneTrust, UpGuard, Cynomi).
• Exposure to vulnerability management tools (e.g., Tenable, Qualys, Rapid7) is a plus.
• Strong written communication, organization, and attention to detail.
• Proficiency in Microsoft Excel and other Microsoft Office applications.
• Ability to work independently in a remote, deadline-driven environment.
• Experience supporting US-based clients is strongly preferred.

Preferred Certifications

• CompTIA Security+
• (ISC)² Certified in Cybersecurity (CC)
• CISA
• CISSP (or Associate status working toward certification)