vCISO virtual Consultant

vCISO (virtual) Consultant

On Site position

1. The candidate must have a minimum of ten (10) years of experience providing vCISO services to organizations with at least 350 or more network users spread across 5 or more physical sites.

2. The vCISO Candidate must have the following experience:

3. Ten (10) years of experience immediately preceding date of proposals in a lead or senior role providing information security services to governmental entities; and

4. A bachelor s degree in a related field; and Ten (10) years experience with organizations of 350 or more network users spread across 5 or more physical sites; and

Required Certifications of Respondent s proposed vCISO that is responsible for performing the service:

• Certified Information Security Systems Professional (CISSP)

• Certified Information Systems Auditor or Manager (CISA or CISM)

SKILLS

1. Provide documentation of at least Ten (10) years of the vCISO candidate s experience immediately preceding date of proposals in a lead or senior role providing information security services to governmental entities providing at least three (3) similar projects.

2. d) Provide documentation of at least Ten (10) years experience with organizations of 350 or more network users spread across 5 or more physical sites

3. e) Describe vCISO candidate s experience developing incident response plans

4. f) Describe vCISO candidate s experience developing vendor risk management programs

5. g) Describe vCISO candidate s experience designing data protection strategies

6. h) Describe vCISO candidate s experience with actual incident response support

SPECIFIC TECHNICAL MERIT

I. Endpoint Detection and Response.

II. Vulnerability Management.

III. Patch Management.
IV. Security Incident and Event Management.

V. Microsoft M365.
i. Information Protection and Governance.

ii. Azure AD.

iii. Entra ID.

iv. Intune.

1. b) Describe vCISO candidate s experience with the following operating systems:

I. Microsoft Windows.

II. Microsoft Server.

III. VMWare.
IV. Linux

Program Development

Establish and document a cybersecurity program during the first 6 months of the contract.

i. The program shall address:

1) NIST Cybersecurity Framework.

2) NIST controls catalog.

3) NIST methodology for systems and data categorization.

ii. Evaluate current practices and guiding documents.

iii. Develop a vision, mission, and strategy document that is endorsed by the executive leadership.

iv. Develop a charter document that is endorsed by the executive leadership.

v. Provide recommendations for program staffing.

b) Consolidate current incident response plan (IRP) components into a stand-alone IRP.

c) Develop and document a vulnerability and patch management program.

d) Develop a Risk matrix for the District s information technology.

e) Develop a Vendor Risk Management program.

f) Develop a Cybersecurity Questionnaire for critical suppliers.

g) Review current cybersecurity awareness training and recommend a training program for employees, including where in the organization the training program should reside.

Ongoing Support

The vCISO shall:

a) Attend and contribute to periodic District Security Committee meetings. It is anticipated that these will occur monthly.

b) Conduct monthly cybersecurity check in meetings.

c) Provide threat intelligence in a digital report monthly.

d) Conduct an annual cybersecurity assessment and provide at a minimum:

i. A detailed report identifying opportunities for improvement and

ii. An executive summary and presentation to District executive leadership.

e) Participate in daily meetings during the week of the District s annual disaster recovery exercise.

3. Incident Response

a) The vCISO shall provide 24/7/365 availability for incident response.

DIRECT CANDIDATES ONLY. PLEASE. NO THIRD PARTY

CANDIDATE WHO CAN WORK FOR ANY EMPLOYER IN USA WITHOUT ANY SPONSORSHIP

Please submit your resume along with the following must required information to:

1. Contact number

2. Email

3. Current location

4. Work Authorization

5. Availability

6. Pay Rate

...

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

vCISO (virtual) Consultant

On Site position

1. The candidate must have a minimum of ten (10) years of experience providing vCISO services to organizations with at least 350 or more network users spread across 5 or more physical sites.

2. The vCISO Candidate must have the following experience:

3. Ten (10) years of experience immediately preceding date of proposals in a lead or senior role providing information security services to governmental entities; and

4. A bachelor s degree in a related field; and Ten (10) years experience with organizations of 350 or more network users spread across 5 or more physical sites; and

Required Certifications of Respondent s proposed vCISO that is responsible for performing the service:

• Certified Information Security Systems Professional (CISSP)

• Certified Information Systems Auditor or Manager (CISA or CISM)

SKILLS

1. Provide documentation of at least Ten (10) years of the vCISO candidate s experience immediately preceding date of proposals in a lead or senior role providing information security services to governmental entities providing at least three (3) similar projects.

2. d) Provide documentation of at least Ten (10) years experience with organizations of 350 or more network users spread across 5 or more physical sites

3. e) Describe vCISO candidate s experience developing incident response plans

4. f) Describe vCISO candidate s experience developing vendor risk management programs

5. g) Describe vCISO candidate s experience designing data protection strategies

6. h) Describe vCISO candidate s experience with actual incident response support

SPECIFIC TECHNICAL MERIT

I. Endpoint Detection and Response.

II. Vulnerability Management.

III. Patch Management.
IV. Security Incident and Event Management.

V. Microsoft M365.
i. Information Protection and Governance.

ii. Azure AD.

iii. Entra ID.

iv. Intune.

1. b) Describe vCISO candidate s experience with the following operating systems:

I. Microsoft Windows.

II. Microsoft Server.

III. VMWare.
IV. Linux

Program Development

Establish and document a cybersecurity program during the first 6 months of the contract.

i. The program shall address:

1) NIST Cybersecurity Framework.

2) NIST controls catalog.

3) NIST methodology for systems and data categorization.

ii. Evaluate current practices and guiding documents.

iii. Develop a vision, mission, and strategy document that is endorsed by the executive leadership.

iv. Develop a charter document that is endorsed by the executive leadership.

v. Provide recommendations for program staffing.

b) Consolidate current incident response plan (IRP) components into a stand-alone IRP.

c) Develop and document a vulnerability and patch management program.

d) Develop a Risk matrix for the District s information technology.

e) Develop a Vendor Risk Management program.

f) Develop a Cybersecurity Questionnaire for critical suppliers.

g) Review current cybersecurity awareness training and recommend a training program for employees, including where in the organization the training program should reside.

Ongoing Support

The vCISO shall:

a) Attend and contribute to periodic District Security Committee meetings. It is anticipated that these will occur monthly.

b) Conduct monthly cybersecurity check in meetings.

c) Provide threat intelligence in a digital report monthly.

d) Conduct an annual cybersecurity assessment and provide at a minimum:

i. A detailed report identifying opportunities for improvement and

ii. An executive summary and presentation to District executive leadership.

e) Participate in daily meetings during the week of the District s annual disaster recovery exercise.

3. Incident Response

a) The vCISO shall provide 24/7/365 availability for incident response.

DIRECT CANDIDATES ONLY. PLEASE. NO THIRD PARTY

CANDIDATE WHO CAN WORK FOR ANY EMPLOYER IN USA WITHOUT ANY SPONSORSHIP

Please submit your resume along with the following must required information to:

1. Contact number

2. Email

3. Current location

4. Work Authorization

5. Availability

6. Pay Rate

...

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.