Fractional CISO (vCISO)
About this role
Arcanys is a high-growth Swiss software development partner with a 300+ person operation in the Philippines. We are looking for a Fractional CISO (Chief Information Security Officer) to transition our security posture to "enterprise-grade".
Who you are (Requirements):
Proven experience leading security governance in mid-sized companies (200–500 employees), including SOC 2 or ISO 27001 certification, ideally in outsourcing/software services companies.
Strong technical foundation across SDLC, CI/CD security, and cloud platforms (AWS, Google Workspace).
Effective communicator and mentor, able to explain security concepts to both junior technical staff and non-technical stakeholders.
Experience handling client security audits and vendor assessments.
Experience working with distributed teams (Europe/Asia/Australia) and with early-stage startups is a plus.
Relevant certifications such as CISSP, CISM, or CISA preferred.
Key Responsibilities:
1. Security Strategy
Design a 12-month security roadmap that balances "Swiss Quality" expectations with the agility of a software outsourcing firm.
Establish a Risk Register and prioritize remediation based on business impact.
2. Mentorship & Team Elevation
Act as the direct mentor to our IT Manager, transforming technical tasks into security controls.
Establish "Security Office Hours" to train our lead developers on secure coding (OWASP) and DevSecOps.
3. Cross-Border Compliance
Ensure all data handling meets the European GDPR, the Philippines Data Privacy Act and the Australian Privacy Act standards, among other regulations.
Standardize our response to client security questionnaires to accelerate the sales cycle.
4. Incident & Policy Management
Draft and implement core policies (Incident Response, Access Control, BCP/DR) that are practical, not just theoretical.
Oversee the selection and implementation of essential security tools (EDR, SIEM, Vulnerability Scanners) without over-complicating the stack.
5. Venture Portfolio Security & Advisory
Define a "Right-Sized" security framework for Arcanys Ventures’ portfolio companies, ensuring they have essential protections without stifling their growth or speed.
Assist the leadership team during the investment process by evaluating the technical security and data privacy risks of potential new ventures.
Act as a fractional advisor for our startups, helping their founders establish basic security policies, data privacy compliance (GDPR/DPA), and a "Security by Design" culture from day one.
Originally posted on Himalayas