Fractional CISO

Job not on LinkedIn

🔥 2 minutes ago

🇺🇸 United States – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Reflexion

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2015

🥽 AR/VR

🤖 Artificial Intelligence

⚽ Sports

💰 $635.7k Venture Round on 2024-05

AR/VR • Artificial Intelligence • Sports

Reflexion is a cognitive sports-training company that uses personalized brain workouts, mixed-reality VR, and touchscreen lightboard hardware to improve athletes' reaction time, eye–hand coordination, anticipation, and other visual-cognitive skills. Their products include a mobile and VR app called Reflexion GO, a portable touchscreen system called Edge, and an AI “Virtual Coach” for automated, science-backed training used by professional teams, collegiate programs, rehab centers, and at-home users. Reflexion emphasizes research-backed methods and offers team-management and performance-tracking tools for trainers and organizations.

📋 Description

• Act as the accountable security executive behind Reflexion’s compliance program for a major enterprise deal • Review and harden the ISO 27001/NIST-mapped Statement of Applicability and evidence package • Sign the risk assessment and Statement of Applicability as the named security officer • Serve as the security contact for enterprise vendor-risk teams • Participate in 2–3 customer security-diligence calls with the CEO • Validate security attestations and controls with the CTO • Triage gaps involving centralized logging, admin RBAC/audit trails, and secrets management • Advise on security exceptions and compensating controls • Scope a SOC 2 Type I path and manage auditor selection and engagement if required • Scope and manage the first external penetration test • Own penetration-test findings triage with the CTO • Review quarterly compliance-calendar outputs, including access reviews, risk-assessment refreshes, training, phishing simulations, BC/DR, and restore tests • Support annual re-attestation and customer audits • Review the breach-notification runbook and advise on incidents triggering 24–72-hour contractual clocks • Advise whether new deal requirements materially change Reflexion’s security posture or can be negotiated

🎯 Requirements

• Prior CISO, vCISO, or security-lead experience at a company selling to large enterprises • Personally handled enterprise vendor-risk review from the vendor side, including security questionnaires, information-security addenda, and right-to-audit clauses • Hands-on fluency with ISO 27001 and NIST CSF control mapping • Experience with SOC 2 readiness through audit • Experience with pragmatic compensating controls and security exceptions • Comfortable being the named, accountable individual signing Statements of Applicability and risk assessments, taking customer calls, and standing behind attestations • Technical fluency sufficient to verify controls in an AWS and Cloudflare stack, including IAM, KMS, CloudTrail/logging, and network posture • Working knowledge of HIPAA applicability analysis • Working knowledge of GDPR-adjacent vendor obligations • NDA required • Availability over the next 60 days • Hourly rate must be provided in the application

🏖️ Benefits

• Fully remote work-from-home position • Hourly contract or equivalent small monthly block • Fractional schedule: ~15–25 hours in the first 60 days, then ~5–10 hours per quarter • Direct line to the CEO and CTO • No full-time conversion pressure • Existing policies, evidence base, obligations register, DPA/SCC pack, and counsel relationships • NDA-required engagement with confidentiality around a Fortune-Global-500-scale counterparty

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume