[Hiring] Fractional CISO @Arcanys

Role Description

Join us as a Fractional CISO (vCISO) in a remote engagement of 20-30 hours per week.

Key Responsibilities

• Security Strategy:
  • Develop procedures, policies, work instructions to fulfill the controls from SOC2 Type2 and ISO27001.
  • Design a 12-month security roadmap that balances "Swiss Quality" expectations with the agility of a software outsourcing firm.
  • Establish a Risk Register and prioritize remediation based on business impact.
• Cross-Border Compliance:
  • Ensure all data handling meets the European GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act standards, among other regulations.
  • Standardize our response to client security questionnaires to accelerate the sales cycle.
• Incident & Policy Management:
  • Draft and implement core policies (Incident Response, Access Control, BCP/DR) that are practical, not just theoretical.
  • Oversee the selection and implementation of essential security tools (EDR, SIEM, Vulnerability Scanners) without over-complicating the stack.

Qualifications

• Proven experience leading security governance in mid-sized companies (200–500 employees), including SOC 2 Type2 or ISO 27001 certification, ideally in outsourcing/software services companies.
• Strong technical foundation across SDLC, CI/CD security, and cloud platforms (AWS, Google Workspace).
• Effective communicator and mentor, able to explain security concepts to both junior technical staff and non-technical stakeholders.
• Experience handling client security audits and vendor assessments.
• Experience working with distributed teams (Europe/Asia/Australia) and with early-stage startups is a plus.
• Relevant certifications such as CISSP, CISM, or CISA preferred.