Subscribe
ALTEN

CISO / vCISO Consultant (B2B)

Bucharest, RomaniaFractional CISO

About This Role

ALTEN Romania, part of the international ALTEN Group - with a unique position as a Leader in IT and engineering Consulting

  • has supported its clients’ development strategies in innovation, R&D, and IT systems since 1996.

A typical day might include the following:

  • Act as an external CISO (vCISO) for client organizations.
  • Define and implement cybersecurity strategies, governance frameworks, and security roadmaps.
  • Lead NIS2, DORA, and ISO 27001 compliance initiatives.
  • Conduct gap assessments and develop remediation plans.
  • Coordinate ICT risk management, incident management, and third-party risk programs.
  • Support business continuity and disaster recovery planning.
  • Prepare management and board-level cybersecurity reports.
  • Coordinate audits, certifications, and interactions with regulatory authorities.
  • Deliver policies, procedures, risk registers, and other security governance artifacts.
  • Contribute to presales activities and the development of GTS cybersecurity services.

To ensure success in this role, you need the following experience and skills:

  • 10+ years of experience in cybersecurity.
  • 3-5+ years in leadership roles such as CISO, Head of Security, Security Manager, or senior GRC consultant.
  • Strong knowledge of NIS2, DORA, ISO 27001, NIST CSF , and cybersecurity risk management.
  • Experience with incident response, third-party risk management, and business continuity.
  • Ability to communicate cybersecurity risk effectively to executives and boards.
  • Experience working with multiple stakeholders or clients simultaneously.
  • Native Romanian and professional English.
  • Active B2B legal entity (PFA/SRL) or willingness to establish one.

Nice to have:

  • CISSP, CISM, CISA, CRISC, ISO 27001 Lead Implementer or Lead Auditor certifications.
  • Experience in financial services, critical infrastructure, or regulated industries.
  • Previous experience as a vCISO or external CISO.
  • Experience working with regulatory authorities (DNSC, BNR, ASF).
  • ORNISS clearance or eligibility.