I step in as your Chief Information Security Officer on a predictable monthly retainer: owning the strategy, answering to leadership, and making sure the right work gets done. Fifteen-plus years of security leadership, sized to where your organization is today.
A fractional CISO fits organizations that have outgrown "IT handles security" but aren't ready for a full-time executive. These are the moments that usually prompt the call.
Security questionnaires and vendor reviews are slowing deals, and nobody owns the answers.
Your cyber insurer wants controls, documentation, and attestations you can stand behind.
The board or owners are asking how exposed you are, and they need a straight answer.
A framework, audit, or regulation is coming and you need a plan to get there.
Something happened, or nearly did, and you want leadership to make sure it doesn't again.
Your teams want AI tools and you need guardrails for data, usage, and risk.
Every retainer draws on the same responsibilities a full-time CISO carries. The level you choose sets how deep and how often.
A prioritized, budget-aware security roadmap tied to business risk.
Where you stand today, measured against recognized frameworks such as NIST CSF.
Practical policies your people can follow, and the governance to keep them current.
Plain-language reporting on risk, progress, and decisions that need making.
Plans, playbooks, and tabletop exercises shaped by real investigation experience.
Review of the vendors and providers who touch your data and systems.
Confident, consistent answers for customers, auditors, and cyber insurers.
Usage policies and risk controls so your teams can adopt AI safely.
Each retainer is a predictable monthly fee with no hourly billing surprises. We set the scope together on an introductory call, and you can move between levels as your needs change.
For leaders who want an experienced security voice on call.
For organizations building a real security program.
For organizations that need a CISO in the room.
Pricing depends on your size, complexity, and scope, and is shared after a short introductory call.
No long sales cycle. A conversation, a clear proposal, and then the work.
We talk about your organization, what's driving the need, and whether this is a fit.
A recommended retainer level, scope, and fixed monthly fee, in writing.
I learn your environment, people, and providers, and identify the risks that matter.
Roadmap execution, reporting, and decisions, month after month.
I've spent more than fifteen years leading cybersecurity and infrastructure. Most recently I served as head of global information security and infrastructure, and acting CISO, for an international company. Before that I directed cyber investigations for an incident response firm and led global IT security for a national supplier.
As a fractional CISO, you work with me directly. That means executive-level judgment, real investigation experience, and someone who's accountable for your security program, at a cost that fits a growing organization.
A fractional CISO is an experienced Chief Information Security Officer who serves your organization part-time. You get the same strategic leadership, accountability, and executive reporting as a full-time CISO, scaled to what your organization needs.
You pay a fixed monthly fee for an agreed scope of work at one of three levels: Advisory, Program, or Embedded. There's no hourly billing to track, and the level can change as your needs change.
Your IT provider keeps systems running. A fractional CISO sets the security strategy, decides what matters most, and holds everyone, including providers, accountable for it. I work alongside your IT team or MSP, not in place of them.
Yes. At the Embedded level I act as your named CISO in those conversations. At every level I help you prepare consistent, accurate answers.
Request an introductory call using the form below. We'll talk through your situation, and if it's a fit I'll follow up with a written proposal.
Tell me a little about your organization and what's prompting the conversation. I'll personally reply within one business day.