{"id":1978442,"url":"https://alion.io/job/tusker-cyber-security-principal","title":"vCISO/Cyber Security Principal","company":{"id":456059,"name":"Tusker","domain":"tuskerco.com","url":"https://alion.io/company/tusker-4","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":175000,"currency":"USD","period":"year","gross":null,"usd_annual":175000},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-06T20:53:45Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-15T08:45:24Z","board_verified":true,"closed_at":null,"days_open":8,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":8},"description":"Tusker is a nationwide technology solutions and services company helping organizations solve complex IT challenges and move their businesses forward. Our expertise spans cloud infrastructure, cybersecurity, managed services, modern workplace, AI, and more. We’re a growing team that values strong relationships, fresh thinking, and doing great work-for our clients and for each other. It all comes back to a simple philosophy that guides who we are: People First. Always.\nThe Cyber Security Principal is a senior, client-facing cybersecurity advisor who performs the function of a virtual Chief Information Security Officer (vCISO) for assigned Tusker clients. The role leads executive advisory relationships and helps clients build, govern, and mature cybersecurity programs that align security investment with business priorities, regulatory obligations, and risk tolerance.\nThe Cyber Security Principal owns the strategic direction and operating cadence of assigned engagements while coordinating the broader Tusker team responsible for assessment, architecture, implementation, managed services, and program support. Success requires executive presence, practical judgment, strong program discipline, and the ability to convert complex cyber risk into clear decisions, sequenced roadmaps, and measurable outcomes.\nKey Responsibilities\nClient Executive Advisory and Engagement Leadership\nServe as the primary trusted cybersecurity advisor to client executives, leadership teams, and boards for assigned accounts.\n\nEstablish engagement objectives, governance, decision rights, meeting cadence, success measures, and executive reporting expectations.\n\nTranslate technical findings, threat conditions, and compliance obligations into business impact, clear choices, and prioritized actions.\n\nBuild durable client relationships through proactive communication, sound judgment, transparency, and follow-through.\n\nManage multiple client programs while maintainingquality, consistency, and responsiveness.\n\nCybersecurity Strategy, Governance, and Maturation\nAssess current-stateprogram maturity and define target-state capabilities using the framework most appropriate toeach client.\n\nDevelop and maintainmulti-year cybersecurity maturation roadmaps aligned to business strategy, budgets, risk tolerance, and regulatory requirements.\n\nCreate or improve governance structures, policies, standards, risk registers, performance measures, and reporting mechanisms.\n\nGuidesecurity budgeting, investment prioritization, and risk-treatment decisions.\n\nDefine meaningful key risk and performance indicators and use them to demonstrate progress and support executive decisions.\n\nRisk, Compliance, Resilience, and Third-Party Oversight\nLead or guide cybersecurity risk assessments, gap assessments, and remediation planning.\n\nAdvise clients on alignment with NIST CSF, NIST 800-53/171, CIS Controls, ISO 27001, CMMC, PCI DSS, HIPAA, and SOC 2, as applicable.\n\nSupport audit and assessment readiness without representing Tusker as the independent auditor or attestation body.\n\nLead third-party risk discussions, vendor due diligence, and risk-based review of critical service providers.\n\nDevelop, review, and exercise incident response and cyber resilience plans, including executive and board-level tabletop exercises.\n\nAdvise onthe secure adoption of cloud, AI, and emerging technologies.\n\nTusker Delivery and Growth Collaboration\nCoordinate with Tusker Solution Architects, technical delivery teams, Managed Services, Advisory, Sales, and external partners to translate roadmaps into executable work.\n\nClarify ownership, dependencies, timing, and expected outcomes across strategic and technical workstreams.\n\nProvide cybersecurity subject-matterexpertiseduring qualified sales pursuits, client workshops, renewals, and expansion discussions.\n\nHelp shape repeatable vCISOmethods, templates, reporting, service standards, and quality controls.\n\nMentor colleagues and strengthen the ability of Tusker teams to identifyadvisory needs and engagethe right resources.\n\nRequired Qualifications\n12 or more years of progressive cybersecurity experience, including significant responsibility for cybersecurity strategy, governance, risk, compliance, and program leadership.\n\nExperience serving as a CISO, vCISO, deputy CISO, security executive, or equivalent senior cybersecurity leader.\n\nDemonstrated ownership of cybersecurity programs, budgets, risk decisions, executive reporting, and board-level communication.\n\nProven ability to lead strategic assessments, create multi-year roadmaps, and guide security-program maturation.\n\nStrong working knowledge of NIST CSF, NIST 800-53/171, CIS Controls, ISO 27001, CMMC, PCI DSS, HIPAA, and SOC 2.\n\nExperience leading incident response planning, executive exercises, third-party risk activities, and governance or policy programs.\n\nExecutive-level communication, facilitation, writing, and presentation skills, with the ability to communicate clearly to technical and non-technical audiences.\n\nAbility to lead through influence across client teams, Tusker teams, and external providers.\n\nAbility to manage multiple concurrent client engagements and operateeffectively in ambiguous situations.\n\nHigh ethical standards, discretion, and professional integrity.\n\nCandidateshould residewithin approximately two hours driving distance of Chicago and be able to travel periodically based on client and business needs.\n\nPreferred Qualifications\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, Business, or a related field; advanced degree is a plus.\n\nOne or more relevant certifications, including CISSP, CISM, CRISC, CISA, CDPSE, or CIPP.\n\nExperience delivering vCISO, cybersecurity advisory, consulting, MSP, or MSSP services to mid-market clients.\n\nExperience in regulated industries such as healthcare, financial services, manufacturing, education, public sector, or organizations in the defense industrialbase.\n\nFamiliarity with GRC platforms, compliance automation, common security operations capabilities, and the commercial realities of outsourced service delivery.","description_format":"text","description_chars":6119,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-06T22:15:32Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.858,"p_room":0.945,"age_days":8,"expected_fill_days":23,"reasons":["conf:1","velocity","win:mid"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":175000,"is_top_pay":false},"html_url":"https://alion.io/job/tusker-cyber-security-principal","json_url":"https://alion.io/job/tusker-cyber-security-principal.json","meta":{"generated_at":"2026-10-15T10:50:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16578,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":456059},"rest":"https://alion.io/mcp/rest/get_company?id=456059"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftusker-cyber-security-principal"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftusker-cyber-security-principal"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftusker-cyber-security-principal"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tusker-cyber-security-principal\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftusker-cyber-security-principal"}]}