Virtual Chief Information Security Officer (vCISO) – Remote (Mexico)

About the role

DYOPATH is seeking an experienced Security Consultant to act as a virtual Chief Information Security Officer (vCISO) for its clients. Working remotely, you will advise executive teams, shape security strategies, and help implement robust security programs across organizations.

Key responsibilities

• Develop and lead enterprise security strategies, roadmaps, and governance frameworks.
• Translate technical risk into business and financial impact for board‑level audiences.
• Lead incident response planning, tabletop exercises, and breach investigations.
• Conduct risk assessments and maturity evaluations using NIST, CIS, ISO and related frameworks.
• Build and mature security policies, compliance initiatives, and vendor/third‑party risk programs.
• Provide regular executive reporting on security posture, risk trends, and program progress.
• Partner with IT, architecture, and business leaders to embed security into daily operations.

Required profile

• Advanced professional proficiency in English.
• Proven experience advising C‑level executives on cybersecurity strategy.
• Ability to work independently in a remote environment and travel internationally when required.
• Strong analytical skills to assess risk and communicate findings clearly.

Required skills

• NIST Cybersecurity Framework
• CIS Controls
• ISO 27001/ISO 27002 standards
• Risk assessment and maturity evaluation
• Incident response planning and execution
• Vendor and third‑party risk management

What we offer

• Competitive annual salary of MXN 500,000–550,000 plus performance‑based bonus.
• Opportunity to work with a award‑winning security advisory practice.
• Remote work flexibility with limited travel.
• Professional growth through exposure to diverse client environments.