Summary

Magna5 provides a portfolio of managed IT services, including network and desktop management, cybersecurity, private and public cloud services, and backup and disaster recovery. Our clients are small to mid-size enterprises that look to us to improve their IT performance, strengthen their security posture, and allow them to focus their resources on what is strategic to their business.

As a member of the vCISO Services team, the vCISO delivers security leadership and advisory services to Magna5 clients. You will report to the Senior Director of vCISO Services. You will work on assigned client engagements, helping clients assess risk, build and mature their security programs, and prepare for audits and regulatory requirements. This role is entirely client-facing and suits someone with a strong GRC background who wants to grow into executive-level security advisory work.

Responsibilities

· Deliver vCISO services for assigned client engagements, acting as a trusted security advisor to client IT and business leaders

· Conduct security risk assessments and gap assessments against relevant frameworks and regulations

· Develop and maintain client security policies, standards, and procedures

· Maintain client risk registers and track remediation progress against agreed roadmaps

· Prepare clients for audits and assessments, including SOC 2, HIPAA, PCI DSS, CMMC, and cyber insurance reviews, and manage evidence collection

· Assist with third-party and vendor risk assessments for clients

· Develop and update incident response plans and help facilitate tabletop exercises

· Prepare reporting and presentation materials for client leadership, and present findings directly when appropriate

· Support pre-sales activity by taking part in discovery calls, contributing to assessments, and giving scoping input

· Stay current on regulatory developments, threats, and frameworks that affect client industries

· Document engagement activity, deliverables, and time in the Magna5 PSA

What You Bring to the Team:

· 6+ years in information technology or security, including 3+ years in GRC, security assessment, or advisory roles

· Working knowledge of NIST CSF 2.0, NIST SP 800-53, NIST SP 800-171, CIS Controls v8, and ISO 27001

· Hands-on experience supporting SOC 2, HIPAA, or PCI DSS audits and assessments

· Strong written communication skills for policies, assessment reports, and client deliverables

· Ability to explain security risk clearly to both technical and non-technical audiences

· Ability to manage multiple client engagements and deadlines

· Technical understanding of identity, cloud (Microsoft 365, Azure, AWS), endpoint, and network security

Preferred Experience:

· Managed Service Provider, MSSP, or security consulting background

· CMMC and Defense Industrial Base experience

· Regulated industries such as financial services, healthcare, education, or government

· Cyber insurance questionnaires and underwriting requirements

· GRC platforms and compliance automation tools

Knowledge, Skills, and Abilities:

· Bachelor's degree in an IT-related field. Relevant and significant industry experience may substitute for the education requirement.

· CISSP, CISM, CRISC, CISA, or Security+ preferred

· CMMC CCP or ISO 27001 Lead Implementer/Auditor a plus

Hours & Schedule:

This position works business hours, Monday through Friday, 8am to 5pm ET or CT. Some travel to client sites may be required.
 

Work Perks:

· 100% remote position

· Extensive paid time off, including paid holidays and floating holidays

· Bonus potential based on individual and company performance

· Highly competitive and flexible medical, dental, and vision benefits plans

· 401(k) with generous employer match

· Tailored life and disability insurance plans

· Full reimbursement for approved professional certifications and career development opportunities

· Monthly mobile phone and internet service stipend

What We Do

Magna5 is a rapidly growing IT Managed Service Provider delivering cybersecurity, private and public cloud hosting, backup and disaster recovery and other advanced services from mid-market to enterprise customers nationwide, including leaders within the education, healthcare, government, financial services, manufacturing, and other industry segments. We integrate advancements in technology and processes to drive businesses forward. As a trusted managed services provider, we bring together the right mix of managed IT services, security, and network connectivity, fully managed by our team of experts 24/7/365. Our passion is to help companies function better, faster, and smarter. We offer an exciting and collaborative environment, with growth potential. For more information, visit our website at http://www.magna5.com/