Chief Information Security Officer (CISO) Remote (anywhere in Mexico)

The Company is seeking a part-time Chief Information Security Officer to build and maintain a practical security program for a distributed software services organization. Responsibilities include assessing security gaps, developing policies and incident response plans, hardening identity and collaboration systems, and strengthening device management, logging, and vulnerability practices. The CISO will prepare for client audits and security questionnaires, review contractual security terms, and establish secure-coding and DevSecOps practices. The role will also create a phased roadmap toward SOC 2 that fits the organization’s scale and needs. Candidates should have experience establishing security programs from the ground up for small software development or IT services organizations and preparing them for client audits. Required expertise includes SOC 2 Type 2, NIST CSF, CIS Controls, Google Workspace security, MFA and identity management, MDM, centralized logging, and vulnerability management. Applicants should be able to draft security documentation, review client agreements, and advise on secure development practices. A CISSP, CISM, or equivalent certification, advanced English proficiency, and familiarity with AI tools are required; experience with distributed teams and healthcare or financial-services requirements is an advantage.

Hiring Company

Empirical