Senior security leadership, governance and risk support without the need for a full-time CISO.
Provided by Tom S., Fractional CISO | GRC & Security Governance | ISO 27001 | NIS2 | AI Governance — Fractional CISO | Security Governance & GRC | ISO 27001 | NIS2 | AI Governance
Need senior security leadership without hiring a full-time CISO? I provide fractional CISO / vCISO support for organisations that need stronger security governance, clearer priorities and practical leadership across cybersecurity, risk and compliance.
The engagement is tailored to your organisation, maturity and business needs. I can work with executive management, IT, compliance, quality, external providers and other stakeholders to establish a practical and sustainable security operating model.
Typical areas of support include: Security strategy, priorities and roadmap Security governance and management reporting Information security risk management ISO 27001-aligned ISMS development and operation Security policies, roles and responsibilities Third-party and supplier risk Identity, cloud and security governance Security programme leadership Management and board-level security reporting AI governance and security considerations Support during audits, customer reviews and compliance activities Engagements can range from targeted advisory support to an ongoing fractional leadership role, typically a few days per month or a defined percentage of capacity.
I bring experience from executive IT leadership, cybersecurity governance, ISO 27001 implementation, risk management and digital transformation, including work in regulated and quality-critical environments. This service provides strategic and operational security leadership.
It does not replace a SOC, managed detection service, penetration testing provider, legal counsel or accredited certification body.
Fractional CISO / vCISO support tailored to your organisation, maturity and security priorities.
Can include: • Security strategy, roadmap and governance • Risk management and ISO 27001-aligned ISMS • Policies, roles and management reporting • Third-party, identity and cloud governance • Security programme leadership • AI governance and audit/customer support Scope, availability and engagement model are agreed before work starts.
Heelr is the cybersecurity services marketplace by Cyberr. Buyers scope work, compare verified providers and pay through protected payments.