Culture & Careers

About Vancord

Founded in 2004, Vancord is a full-service Managed Service and Cyber Security Provider headquartered in the Northeastern United States. Vancord successfully combines the power of execution, strategy, and partnership to deliver multi-faceted Information Technology and Cyber Security services to our valued customers. We build strong partnerships with startups, manufacturers, higher education, state and municipal governments, and other diverse organizations.

Who we look for

Vancord seeks talented, engaging candidates to expand its virtual Information Security Office (vISO). This service helps organizations large and small to mature their information security program and preparedness by functioning as a virtual Information Security Officer or advising customer staff in that position. We are eager to expand our team with individuals who can provide astute, actionable security guidance for the diverse organizations that make up the Vancord customer base.

In contrast to virtual CISO offerings of our competitors, the vISO service is delivered as a team. Most engagements embed Vancord to develop strategy in partnership with customer executives or directors. Candidates for this position will serve as the primary customer contact, responsible for developing a trusted relationship, delivering expert guidance, liaising with other customer staff/departments, and executing or coordinating identified work.

Some discussions are more operations focused, covering deeply technical subjects to analyze specific issues and provide tactical guidance. Candidates must be able to straddle this line with ease, dynamically adapting to the appropriate audience and acting as a translator across customer teams for organizational security needs.

Vancord specifically seeks individuals who can demonstrate excellent communication skills. Candidates must adapt guidance in the moment to the audience, consider organizational culture and team dynamics, understand and navigate organizational power structures.

Common responsibilities include:

• Development, refinement, and sustainment of an information security program
• Executive level reporting to convey security initiatives, compliance status, and organizational needs
• Authorship of organizational/departmental policies and procedures
• Maintenance of compliance data and status of security controls
• Vendor risk review and management
• Third party attestations to represent customer security practices (e.g., for cyber liability insurance application/renewal)
• Guidance and triage assistance to evaluate security events
• Security awareness training and outreach to bolster customer staff vigilance to meet compliance obligations
• Mentorship and coaching of customer staff to elevate security acumen and familiarity
• Risk management and tracking
• Authorship of guidance for broad distribution to customer staff members

Ideal candidate characteristics and abilities:

• Current or former CISO, CIO, information security architect, virtual equivalent (e.g., vCISO), or combined work experience in mid-sized organizations
• Ability to learn and accommodate organizational culture of each customer
• CISSP, CISM, GIAC certification, or combination of work and experience
• Demonstrable familiarity with compliance landscape across areas such as NIST 800-171/800-53/CSF, CMMC, HIPAA, GLBA, data privacy
• Understanding of vulnerability measurement, triage, prioritization, and risk management
• Competence in data security governance, classification, and related safeguards
• Familiarity across multiple industries and disciplines
• Refined written communication skills
• Ability to adapt to a varied audience on the fly, including the ability to translate needs and build bridges between unrelated departments
• Professional background that includes technical engineering work
• Keen awareness that security is ever evolving and requires balance

In keeping with the team-driven approach, other applicants who work in close conjunction with similar roles are also encouraged to apply if they demonstrate competence in engaging across organization business units. Previous association with organizations in manufacturing, legal, healthcare, or higher education is a benefit for demonstrable domain knowledge.

In this role, individuals will be expected to provide objective advice rather than sell specific services. Customer needs for new projects, products, and services will be facilitated by separate sales staff.

Remote work is the norm for most engagements with Vancord’s vISO service. Occasional travel to customer sites is likely (e.g., for executive reporting, tabletop exercises, etc.).

Compensation commensurate with experience.