Lumifi

Security Engineer

• Develop and execute client-specific cybersecurity strategies and roadmaps aligned with business objectives.
• Establish and lead information security governance programs, including policy frameworks, standards, and procedures.
• Communicate risk posture and cybersecurity priorities to client executives and boards in business terms.
• Define and manage key performance indicators (KPIs) and metrics for program maturity.
• Advise on security risk assessments and gap analyses against frameworks such as NIST CSF, CIS Controls, ISO 27001, or CMMC.
• Guide clients through compliance initiatives (e.g., SOC 2, HIPAA, GDPR, PCI DSS).
• Identify, assess, and prioritize cybersecurity risks; recommend remediation plans and track progress.
• Oversee third-party vendor risk management programs.
• Provide leadership over client security operations.
• Review security architecture, processes, and operational workflows to ensure best practices.
• Coordinate tabletop exercises and incident response planning.
• Evaluate security tools and recommend enhancements to clients’ technology stack.
• Serve as the primary cybersecurity advisor for assigned clients, maintaining long-term relationships built on trust and measurable outcomes.
• Present executive-level security reports and briefings to client stakeholders.
• Collaborate with internal technical teams (SOC, Engineering, Compliance) to align delivery with client needs.
• Stay current with emerging threats, regulations, and industry best practices to proactively advise clients.
• Develop standardized vCISO methodologies, templates, and frameworks for internal use.
• Mentor junior staff and contribute to service delivery improvements.
• Participate in business development by supporting client proposals, presentations, and renewals.

Chief Information Security Officer, Virtual