vCISO Contractor - EMEA

Stack

Responsibilities

• ▹Communicate complex security and risk topics across all levels of an organization
• ▹Develop, execute, and own a multi-year security roadmap
• ▹Lead formal Security Risk Assessments, define risk appetite, and develop mitigation strategies
• ▹Build, scale, and mature holistic security programs (people, process, and technology)
• ▹Provide strategic direction on security tool selection and security budget management

Requirements

• ▹Deep, practical expertise in EU regulatory and governance frameworks: ISO 27001 (mandatory), SOC2, GDPR, DORA
• ▹Experience with GRC automation tools such as Vanta or Drata
• ▹Excellent written and verbal communication skills in English
• ▹Senior-level cybersecurity expert located in EMEA

Nice to have

• ▹Anonymized case studies of security programs led or ISO 27001 certification projects

Soft skills

About the company

Kobalt.io is a cybersecurity consulting company providing executive-level security services to EMEA-based clients.