vCISO & Security Solution Advisor

Overview

vCISO & Security Solution Advisor — Bluecube Technology Solutions – An Ekco Company

Role description: The Cyber Security Technical Presales Specialist will act as a trusted strategic advisor to clients, delivering leadership, governance, and operational oversight of cybersecurity programs on a flexible, scalable basis. This role helps Ekco’s clients protect digital assets, meet compliance obligations, and align security with business outcomes in cloud-first and hybrid environments. It also supports Ekco’s internal service offerings to be mature, repeatable, and aligned with best practices in cyber governance, risk management, and cloud security architecture.

Responsibilities

• Serve as the primary security advisor for multiple client organisations
• Develop and deliver tailored cybersecurity strategies, roadmaps, and governance frameworks
• Conduct risk assessments, define mitigation plans, and report to executive stakeholders and boards
• Create and maintain client-specific Information Security Management Systems (ISMS) aligned with ISO 27001, NIST CSF, and/or other relevant standards
• Guide clients through compliance and audit readiness (e.g. GDPR, NIS2, SOC 2)
• Regularly deliver board-level reporting, threat landscape overviews, and KPI dashboards
• Participate in incident response planning, including BCP/DR strategy, tabletop exercises, and breach communications
• Maintain and monitor risk registers and security KPIs for clients
• Establish policies and standards across identity, access, data protection, remote access, and incident management
• Collaborate with legal and compliance stakeholders on regional, sector-specific regulatory needs (GDPR, HIPAA, DORA, etc.)
• Deep understanding of Microsoft 365 security controls; deliver hands-on workshops and translate technical concepts into business outcomes
• Deliver workshops on data envisioning and threat protection tailored to customer needs
• Contribute to the evolution of Ekco’s vCISO delivery playbooks, templates, and processes
• Support development of proposals to implement security controls and mentor junior consultants
• Provide input into product/service design to enhance Ekco’s security-as-a-service portfolio
• Deliver client security posture improvements, track risk remediation, and support client retention/satisfaction metrics

Qualifications

• 7+ years in cybersecurity, including at least 3–5 years in advisory or CISO-type roles
• Prior experience in Managed Service Providers (MSPs) or consultancy-based models delivering CISO-as-a-Service
• Strong knowledge of global regulations and frameworks (ISO 27001, NIST, GDPR, NIS2)
• Proven ability to engage with client boards and executive teams in regulated or high-risk industries
• Certifications (preferred): CISSP, CISM, CISA; ISO 27001 Lead Implementer/Auditor; CCSP or cloud certifications (AWS, Azure, GCP); CRISC or similar for risk/compliance
• Technical fluency in cloud-native and hybrid security architectures; SIEM/SOAR/EDR/XDR platforms; M365 security controls

Benefits

• Time off: 25 days leave + public holidays
• x1 day Birthday leave per year
• Company Pension Scheme (employer contribution 5%) + flexible salary sacrifice
• Employee Assistance Programme (EAP) for mental health and wellbeing
• EkcOlympics – global activity for fun
• Learning & development: Unlimited access to Pluralsight
• Growth opportunities, including international roles

Location and Status

Locations: Multiple locations; Fully Remote

Seniority level: Mid-Senior level

Employment type: Full-time

Job function: Consulting, Information Technology, and Sales

Industries: IT Services and IT Consulting