Careers
Fractional Security Delivery Lead (Contract)
Client Advisory · Remote US · Contract, 2 days a week · Accepting applications.
About Bridgham Cyber
Bridgham Cyber is a cybersecurity advisory and managed security firm based in Raleigh, North Carolina. The firm serves regulated and semi-regulated US companies of 400 to 1,000 employees: community banks, credit unions, lenders, law firms and investment advisers. Each client engages the firm under one program at one annual fee. The firm holds every client relationship and takes every client call. We commit our people, our judgment and our partner bench to protecting the firms that rely on us. Our people are trusted advisors to boards and management teams, and their work has a lasting impact on the clients they serve.
About the role
The Fractional Security Delivery Lead is the firm's senior hands-on practitioner for a small number of client engagements. The engagement begins at two days a week and scales to five as the firm's client book grows. The lead owns the quality of every deliverable for the clients in the book and carries a direct line to the firm's principal and to its monitoring and incident-response partners.
Your impact
- Run the three intake sessions in the first ten days of each engagement and sign off the intake record.
- Produce and review the client's policy and program documents from the firm's templates.
- Answer client questions within five business days with a written decision record. The record states who owns the risk, whether it is a security or a compliance issue, whether it is exploitable, and whether legal needs to be involved.
- Run the two-hour clock to incident start with the response partner when the monitoring partner escalates.
- Write the one-page monthly readout for the client's board.
- Log every hour by station.
Who you will work with
The firm's principal, the monitoring and incident-response partners, and the client's technology lead and board.
You may be a good fit if you
- Have 6 to 10 years delivering security programs at a Big Four firm, a national MSSP or MDR provider, or a regulated-sector consultancy.
- Have run client intake alone and presented to a board or audit committee.
- Have worked a live incident alongside an MDR or IR vendor.
- Write plainly and quickly.
- Are available two days a week within 30 days of an offer and are not committed full-time elsewhere.
- Are comfortable working under the firm's name with no personal byline.
Strong candidates may also have
- CISSP, CISM or CISA.
- Prior vCISO or fractional engagements.
- Microsoft Defender for Endpoint and Entra ID in client tenants.
- Familiarity with NIST CSF 2.0, FFIEC, NCUA, NYDFS Part 500 and FTC Safeguards.
Details
- Location
- Remote US
- Type
- Contract, 2 days a week
- Compensation
- $1,200 to $2,000 a day, by quote. Paid monthly within 15 days of invoice.
- Start
- Within 30 days of acceptance.
- Status
- Accepting applications.
- Independent contractor (1099), with a statement of work per client.
- 30 days' notice either way.
- 12-month client non-solicit.
- The firm owns the work product.
- Work is not performed in California.
How to apply
Deadline to apply: none. Applications are reviewed on a rolling basis. Send a résumé and one page of recent writing to careers@bridghamcyber.com with the role title in the subject line. The process is a 30-minute introductory call, a short work sample, a second interview and two references. It runs two to three weeks end to end. Bridgham Cyber is an equal opportunity employer and engages contractors on the same basis. The firm considers qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status.