Fractional CISO
Posted 17hrs ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Fractional CISO securing Arcanys’ Philippines-based software outsourcing operations. Establishing governance, compliance, incident policies, and security tooling across distributed teams.
Responsibilities:
- Develop procedures, policies, and work instructions to fulfill SOC 2 Type 2 and ISO 27001 controls
- Design a 12-month security roadmap balancing Swiss quality expectations with software outsourcing agility
- Establish a risk register and prioritize remediation based on business impact
- Ensure data handling meets European GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act standards
- Standardize responses to client security questionnaires
- Draft and implement Incident Response, Access Control, and BCP/DR policies
- Oversee selection and implementation of EDR, SIEM, and vulnerability-scanning tools
Requirements:
- Proven experience leading security governance in mid-sized companies (200–500 employees)
- Experience with SOC 2 Type 2 or ISO 27001 certification
- Experience in outsourcing/software services companies ideally
- Strong technical foundation across SDLC, CI/CD security, and cloud platforms
- Experience with AWS and Google Workspace
- Ability to communicate security concepts to junior technical staff and non-technical stakeholders
- Experience handling client security audits and vendor assessments
- Experience working with distributed teams across Europe, Asia, and Australia is a plus
- Experience with early-stage startups is a plus
- CISSP, CISM, or CISA certification preferred
Benefits:
- Career and personal development opportunities
- Well-being, trust, and autonomy-focused work culture
- Flexible work arrangements
- Remote work
- Work on projects the company believes in
