Fractional CISO

Arcanys · posted 2 days ago

Open to candidates in Albania, Algeria and 139 more

Albania, Algeria, Andorra, Angola, Armenia, Australia, Austria, Bahrain, Bangladesh, Belarus, Belgium, Benin, Bhutan, Bosnia and Herzegovina, Botswana, Brunei, Bulgaria, Burkina Faso, Burundi, Cambodia, Cameroon, Cape Verde, Central African Republic, Chad, China, Comoros, Congo - Brazzaville, Congo - Kinshasa, Croatia, Cyprus, Czechia, Denmark, Djibouti, Egypt, Equatorial Guinea, Eritrea, Estonia, Eswatini, Ethiopia, Fiji, Finland, France, Gabon, Gambia, Georgia, Germany, Ghana, Gibraltar, Greece, Guinea, Guinea-Bissau, Hong Kong, Hungary, Iceland, India, Indonesia, Iraq, Ireland, Israel, Italy, Ivory Coast, Japan, Jordan, Kenya, Kosovo, Kuwait, Laos, Latvia, Lebanon, Lesotho, Liberia, Libya, Liechtenstein, Lithuania, Luxembourg, Macao SAR China, Madagascar, Malawi, Malaysia, Maldives, Mali, Malta, Mauritania, Mauritius, Moldova, Monaco, Mongolia, Montenegro, Morocco, Mozambique, Myanmar, Namibia, Nepal, Netherlands, New Zealand, Niger, Nigeria, North Macedonia, Norway, Oman, Pakistan, Papua New Guinea, Philippines, Poland, Portugal, Qatar, Romania, Rwanda, San Marino, Saudi Arabia, Senegal, Serbia, Seychelles, Sierra Leone, Singapore, Slovakia, Slovenia, Somalia, South Africa, South Korea, South Sudan, Spain, Sri Lanka, Sudan, Sweden, Switzerland, São Tomé & Príncipe, Taiwan, Tanzania, Thailand, Timor-Leste, Togo, Tunisia, Türkiye, Uganda, Ukraine, United Arab Emirates, United Kingdom, Vietnam, Zambia, Zimbabwe

Lead

See my match for each job — freeApply on the company site

Sign up and we score this job against your resume. You never pay to apply.

RemoteHunt reads employers' own pages. Free to browse. How we check

What this job asks for

Extracted by RemoteHunt

Must have

  • •Develop security policies for SOC2/ISO27001
  • •Design 12-month security roadmap
  • •Establish and prioritize Risk Register
  • •Ensure GDPR, DPA, Australian Privacy Act compliance
  • •Implement Incident Response, Access Control, BCP/DR policies
  • •Experience leading security governance in mid-sized companies

Nice to have

  • •Experience with distributed teams
  • •Experience with early-stage startups
  • •CISSP, CISM, or CISA certifications

Tools and technologies

AWS, Google Workspace, EDR, SIEM, Vulnerability Scanners

Read the full posting

About Arcanys

Arcanys launched in 2010 to help entrepreneurs and innovators from Australia, Europe and other parts of the globe accelerate their software development with dedicated remote engineers from the Philippines.

Why work with us?

There’s a unique spirit to Arcanys—manifested in our amazing talents, passion for technology, and a strong focus on everyone’s career and personal development. As a company rooted in people, we make a point to offer exciting work opportunities and foster a culture that everyone can meaningfully contribute to.

Join us as a: Fractional CISO (vCISO)

Location: Remote

Engagement: Fractional (20-30 hours/week)

Key Responsibilities

  1. Security Strategy

  • Develop procedures, policies, work instructions to fulfill the controls from SOC2Type2 and ISO27001

  • Design a 12-month security roadmap that balances "Swiss Quality" expectations with the agility of a software outsourcing firm.

  • Establish a Risk Register and prioritize remediation based on business impact.

2 . Cross-Border Compliance

  • Ensure all data handling meets the European GDPR, the Philippines Data Privacy Act and the Australian Privacy Act standards, among other regulations.

  • Standardize our response to client security questionnaires to accelerate the sales cycle.

  1. Incident & Policy Management

  • Draft and implement core policies (Incident Response, Access Control, BCP/DR) that are practical, not just theoretical.

  • Oversee the selection and implementation of essential security tools (EDR, SIEM, Vulnerability Scanners) without over-complicating the stack.

Who You Are (Requirements)

  • Proven experience leading security governance in mid-sized companies (200–500 employees), including SOC 2 Type2 or ISO 27001 certification, ideally in outsourcing/software services companies.

  • Strong technical foundation across SDLC, CI/CD security, and cloud platforms (AWS, Google Workspace).

  • Effective communicator and mentor, able to explain security concepts to both junior technical staff and non-technical stakeholders.

  • Experience handling client security audits and vendor assessments.

  • Experience working with distributed teams (Europe/Asia/Australia) and with early-stage startups is a plus.

  • Relevant certifications such as CISSP, CISM, or CISA preferred.

Send this job to a friend:TelegramWhatsApp

More remote jobs for the Philippines on Telegram → @RemoteHuntAsia

More remote jobs

21GRAMS- Art Director

Real Chemistry

$70k–$80k

Boston - Massachusetts; Carmel - Indiana and 3 more · 2d ago

More remote jobs open to candidates in

United Arab Emirates · 3,125Bangladesh · 2,461Bulgaria · 4,844

See how well this job fits your resume

Free, no card.

See my match for each job — free