vCISO needed to lead compliance governance & incident response for RIA and CPA firms (SEC/FTC)

We are a fully remote boutique security and compliance firm serving US financial services businesses navigate regulatory compliance requirements. Looking for an experienced vCISO to lead client-facing security work as we grow. What you'll do: - (starting at 8 to 50hrs/mo) - Lead monthly security & compliance reports with Chief Compliance Officers and Managing Partners - Run incident response tabletop exercises - Review client security posture (MFA, endpoint protection, backup, email security) - Guide clients through compliance documentation (WISP, IR plan, vendor oversight etc) Serve as the technical escalation point during a live security incident Note: (You will always be provided with the tools and assistance to ensure proper execution of all regular monthly work. It is our responsibility to ensure that you are prepared with everything you need to confidently fulfill your role). What You Won't Do: - No hands-on technical work — installing tools, configuring systems, fixing endpoints and drafting policies. You only review and advise, you don't execute. - No Improvising. We have documented process for each all required tasks. You should have: -CISSP, CISM, or equivalent credential Experience with SEC/FTC/GLBA-style compliance frameworks -Prior work with financial services or professional services clients -Comfortable explaining technical risk to non-technical executives -Available for scheduled client calls during US business hours Nice to have: Prior vCISO or fractional CISO experience Familiarity with cyber insurance underwriting requirements This is a very easy job for those who have the experience and the credentials for it. We are quite flexible on experience as training will be provided before client work begins.