Chief Information Security Officer

Job Description

About TechCXO

TechCXO pioneered the fractional executive leadership model. For more than 20 years, we have built a firm designed specifically for accomplished C-suite operators who want both impact and autonomy.

We do not place executives. Our CISO Partners build their own portfolio practices within the TechCXO platform, serving as embedded cybersecurity leaders to growth-stage and middle-market companies.

As a TechCXO CISO Partner, you step into companies as the acting security executive. You work directly with founders, CEOs, boards, and investors to provide strategic leadership and operational execution across cybersecurity, risk, and compliance.

You control the clients you serve and the work you take on. At the same time, you are part of a national partnership of experienced peers who collaborate across Technology, Finance, Revenue Growth, Executive Operations, and HR. This is not employment. It is a Partner model for executives who want to build and grow a practice within an established firm.

The Opportunity

As a TechCXO CISO Partner, you will:

• Serve as the embedded cybersecurity leader for multiple growth-stage companies
• Advise founders, CEOs, boards, and investors on security strategy, privacy, and compliance direction
• Lead governance, risk management, and security architecture decisions across the client's technology environment
• Install the cybersecurity infrastructure, processes, and talent that support the execution and operations of a mature security program
• Originate and build client relationships in your market
• Collaborate across TechCXO practices, including Finance, Revenue Growth, Executive Leadership, and Human Capital

What This Role Really Requires

This role is best suited for CISOs who:

• Have already operated at the C-level
• Are comfortable building their own book of business and have operated fractionally
• Want autonomy without isolation
• Prefer execution over theory
• Have credibility with investors, boards, and IT and security teams

You are not joining a bench waiting for assignments. You are building a practice within a platform.

Core Responsibilities

Responsibilities vary by engagement and may include any or all of the following:

Cybersecurity Strategy & Executive Leadership

• Define and own cybersecurity strategy and multi-year roadmap aligned to business and risk priorities
• Serve as the named security executive for boards, investors, and senior leadership teams
• Advise founders and boards on security risk, investment, and tradeoffs, translating technical risk into business language
• Design and facilitate cybersecurity steering committees and governance structures
• Align security priorities with business objectives, growth plans, and go-to-market priorities
• Advise boards and leadership teams on AI governance, data privacy, and emerging technology risk

Security Program Design & Technical Oversight

• Design and oversee security architecture, controls, and infrastructure to improve performance, availability, and resilience
• Establish security standards, policies, and operating practices across the organization
• Lead or oversee vulnerability management, penetration testing, and security assessments to identify and close gaps
• Direct incident response planning, playbook development, and disaster recovery/business continuity programs
• Ensure security architecture and controls align with applicable regulatory and industry frameworks
• Assess security and data privacy risk associated with AI/ML adoption and integration
• Lead technical and cyber risk due diligence for M&A, fundraising, and exit transactions
• Assess and remediate security debt and scalability gaps ahead of transactions, and prepare security programs for investor or acquirer scrutiny

Team & Organization Building

• Build, structure, and scale security and IT teams as companies grow
• Recruit, mentor, and develop security leadership and key technical talent
• Lead status meetings and updates for executive teams, boards, and key stakeholders

Risk & Compliance

• Design and manage enterprise risk management programs, including ongoing risk register maintenance
• Lead compliance program management across applicable frameworks (SOC 2, CMMC, HIPAA, PCI, ISO 27001, etc.)
• Advise on data privacy program requirements and obligations across applicable regulations (e.g., GDPR, CCPA)
• Design and oversee vendor and third-party risk management programs
• Develop corrective action plans and track remediation execution
• Build and manage security awareness, training, and phishing simulation programs

Business Development

• Build and maintain a strong referral network in your regional market
• Source new client engagements through founder, investor, and advisor relationships
• Strengthen relationships with VC, PE, banking, and legal communities
• Represent TechCXO as a thought leader in cybersecurity

Collaboration

• Partner with other TechCXO leaders to deliver integrated client solutions
• Contribute to intellectual capital and thought leadership
• Mentor newer Partners where appropriate

Ideal Background

We pursue CISOs with depth, not title inflation.

• 10+ years as a true operating CISO or top security executive
• Experience across regulated or complex industries (e.g., healthcare, financial services, government/defense, manufacturing)
• Track record building and scaling cybersecurity and compliance programs from the ground up
• Experience guiding companies through compliance certifications and regulatory audits (SOC 2, HIPAA, CMMC, ISO 27001, etc.)
• Board-level communication experience
• Built and led security teams and programs from early stage through enterprise scale
• Operated in high-growth, high-risk, or change-heavy environments

What Makes a Strong TechCXO Partner

• Entrepreneurial mindset
• High personal accountability
• Strong regional network
• Comfort operating independently
• Bias toward execution
• Collaborative orientation within a peer partnership

Why TechCXO

• You operate under a recognized national brand
• You join a peer group of experienced C-level operators
• You maintain autonomy while leveraging shared infrastructure
• You participate in a long-standing executive partnership model

TechCXO is committed to equal opportunity and does not discriminate on the basis of legally protected characteristics in the selection of Partners or engagement opportunities.