> Markdown version of [/jobs/ext/4637580-fractional-chief-information-security-officer-ciso](https://www.wearedevelopers.com/jobs/ext/4637580-fractional-chief-information-security-officer-ciso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Fractional Chief Information Security Officer (CISO) - **Company:** AUSTCO, INC. - **Location:** Irving, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Software as a Service, Cloud Computing, Cyber Security, Data Security, Internet Security, Systems Integration, Software Vulnerability Management, National Institute of Standards and Technology Cybersecurity Framework - **Published:** November 8, 2026 - **Apply:** https://www.careerbuilder.com/job-details/fractional-chief-information-security-officer-ciso-irving-tx--4c1c634a-fafe-4b3c-929f-3fe206d062ac ## About the Role Information/Data Security (InfoSec), Healthcare, Aged Care, Hospital, Cloud Computing, Information/Data Security (InfoSec), Internet Security, Leadership, Willing to Travel, Nursing, * 10+ years in information security, with at least 3 years in a CISO or senior security leadership role * Demonstrated success leading security transformation in complex, multi-entity or post-acquisition environments. * Proven ability to drive organizational change, including transitioning decentralized IT environments to centralized/managed models * Experience building and executing IT roadmaps, including cloud migration (AWS or equivalent) * Strong knowledge of HIPAA/HITECH, NIST CSF, ISO 27001, SOC 2, and the ACSC Essential Eight * Experience operating across multiple international jurisdictions * Strong executive communication and board-level reporting skills * Availability for on-call incident response; willing to serve as the security escalation point for BCP/DRP events * Ability to operate autonomously with minimal day-to-day supervision HIGHLY REGARDED * CISSP, CISM, or CISA certification * Experience with IEC 62443 or medical device cybersecurity standards (FDA pre/post-market guidance) * Background supporting SaaS or cloud-based product companies * Familiarity with US, Canadian, New Zealand, Australian, UK, and Singapore regulatory environments ## Description We're not looking for someone to advise on security. We're looking for someone to own it. Austco Healthcare is a global clinical communication company, deployed in hospitals and aged care facilities across 60+ countries and we're hiring a Fractional CISO to lead and mature our security function. This role has a Board-level mandate, real executive sponsorship, and genuine autonomy. You will unify security across our corporate entity and subsidiaries, advance our alignment to the ACSC Essential Eight, and help shape our cloud strategy across a global organization. The role is 2-3 days a week, based in Dallas, TX and is the kind of engagement where you'll leave a mark. If you've led security transformation in a complex, multi-entity environment, and you'd rather own the outcome than manage a slide deck, we'd like to hear from you!, Fractional Chief Information Security Officer, Austco Healthcare is seeking an experienced Fractional CISO to lead enterprise cybersecurity strategy across a growing global organization. This is a strategic, hands-on leadership role, responsible for unifying security across Austco's corporate entity and its acquired subsidiaries, all regions, and any future acquisitions., * Develop and own the enterprise information security strategy aligned to business objectives across Austco and all subsidiaries * Drive adoption of a centralized, managed IT operating model and advance maturity against the ACSC Essential Eight * Establish and maintain security policies, standards, and frameworks (NIST CSF, ISO 27001, SOC 2, ACSC Essential Eight) * Chair or advise the security steering committee; report to the Board on risk posture and maturity progress * Lead IT roadmap planning and migration of infrastructure to cloud-based environments (AWS and equivalent), establishing a centralized IT operating model ACQUISITION INTEGRATION & SUBSIDIARY ALIGNMENT * Engage Austco's subsidiaries to align their IT domains with the enterprise security framework * Evaluate and integrate future acquisitions from a security and IT perspective - assessing posture, risks, and integration requirements * Work across all Austco regions (US, Canada, Australia, UK, Singapore, New Zealand) to drive consistent adoption of security objectives RISK & COMPLIANCE * Lead risk assessments and manage the organizational risk register * Ensure compliance with HIPAA, HITECH, and applicable international data privacy regulations (GDPR, Australian Privacy Act, PDPA) * Oversee third-party and vendor risk, including managed service provider (MSP) relationships INCIDENT RESPONSE & OPERATIONS * Own the incident response plan and lead response to significant security events * Serve as a key escalation point within Austco's Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) * Partner with IT teams and the MSP on vulnerability management, security architecture, and operational security * Drive security awareness training across all global offices LEADERSHIP & STAKEHOLDER MANAGEMENT * Manage local IT teams across subsidiaries and regions, providing direction, oversight, and mentorship * Act as the primary interface with the managed service provider (MSP), ensuring service levels and security standards are met * Serve as the internal and external-facing security authority for Austco * Advise on security implications of M&A activity, product development, and infrastructure changes What Success Looks Like in The First 6 to 12 Months Within the first year, we expect this engagement to deliver: * A unified, centralized IT operating model established across the corporate entity and the ANZ subsidiaries * Measurable progress against the ACSC Essential Eight, to a maturity level agreed with the Board * Enterprise security policies, standards and a live organizational risk register adopted group wide * An approved cloud migration roadmap underway * Incident response, business continuity and disaster recovery plans validated through at least one tabletop exercise * Security and IT integration plans agreed for each Austco subsidiary