Assura, Inc.

About the Company

Assura provides innovative cybersecurity advisory and managed services to all industries including government, healthcare, financial, manufacturing, and transportation sectors. Our unique capabilities include tying together risk-based cybersecurity with sustainable compliance and developing inventive technical solutions for our clients.

Whether you need us for a single project or want our team of experts to manage your cybersecurity program, Assura has the solution that's right for you.

Listed Jobs

Company Name

Assura, Inc.

Job Title

Information Security Consultant

Job Description

**Job Title** Senior Virtual Information Security Officer (Senior VISO) **Role Summary** Act as a CISO‑level advisor to oversee the quality, consistency, and strategic direction of GRC engagements. No hands‑on implementation or direct people management; focus on strategy, mentoring, and executive client engagement. **Expectations** - Provide senior advisory guidance to clients. - Mentor and support Virtual ISOs (VISOs) in daily GRC work. - Ensure deliverables are accurate, complete, and practically applicable. - Serve as escalation point for complex client issues. - Translate regulatory and technical requirements into actionable guidance. - Support scope expansion and evolve methodologies and service offerings. **Key Responsibilities** 1. Deliver CISO‑level strategic advice to clients. 2. Oversee and mentor VISOs on GRC initiatives. 3. Review and approve deliverables for accuracy and real‑world applicability. 4. Handle senior client escalations and complex questions. 5. Convert regulatory, standard, and compliance requirements into clear guidance. 6. Lead discussions on scope expansion and new client needs. 7. Contribute to the evolution of GRC templates, methodologies, and services. **Required Skills** - Deep knowledge of NIST frameworks (800‑53, 800‑171, CSF). - Familiarity with SEC 530 (Virginia Information Security Standard) strongly preferred. - Prior consulting or advisory experience in information security. - Strong verbal and written communication; confident in executive/board contexts. - Technical literacy sufficient to advise on controls without implementing. - Excellent documentation and writing capabilities. **Required Education & Certifications** - Bachelor’s degree in cybersecurity, information technology, or related discipline. - Relevant industry certifications (e.g., CISSP, CISM, CRISC, or equivalent) preferred.

Richmond, United states

Remote

05-02-2026