Fractional CISO

Role overview Provide senior security leadership to several growing client organisations that need CISO-level guidance without a dedicated full-time leader of their own. You will shape security strategy and programmes, represent security to executives and boards, and coordinate delivery with specialist security teams.

Responsibilities - Serve as the security leader or named security advisor for multiple client organisations. - Assess each organisation’s security posture and develop multi-year plans aligned with its business goals. - Establish governance covering policies, risk management, metrics and executive or board reporting. - Lead compliance programmes across frameworks and obligations such as ISO 27001, SOC 2, PCI DSS, HIPAA and data protection requirements. - Prepare clients for incident response and act as the executive lead during major incidents. - Advise on secure cloud and AI adoption, including AI governance. - Manage third-party security risks and help clients respond to customer security reviews. - Mentor consultants and contribute to the development of a CISO advisory service.

Requirements - 15+ years in information security, including at least 5 years as a CISO, deputy CISO or head of security. - Demonstrated success building security programmes and reporting to executive leaders and boards. - Deep knowledge of frameworks and regulations including ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR and DPDP. - Strong understanding of cloud security, security operations and incident response. - Excellent executive communication and ability to explain risk in business terms. - Experience working with clients in the US, UK or Europe.