Service line · vCISO
A CISO's judgement without a CISO's payroll
A full-time CISO costs more than most mid-market companies can justify. A vCISO delivers the function in days per month: the programme, the committee, the risk register and the answers that unblock deals.
- Companies of 20–300 people with no security leader
- Businesses with a deal blocked on security review
- Companies under LGPD, insurer or audit pressure
Offers
Ongoing leadership, with well-defined entry points
The retainer is the heart of the line. The other formats exist to start, intensify or close out an engagement well.
- Start here
vCISO Retainer
Ongoing part-time security leadership: owning the security programme, chairing a monthly committee, maintaining the risk register and roadmap, managing vendors, handling enterprise-client and auditor conversations, and reporting to leadership quarterly.
- Essential (2 days/month), Standard (4) and Scale (8) tiers
- Security committee and quarterly executive report
- Enterprise-client questionnaire support
6–12 months, renewable
First Security Hire Advisory
When it is time to insource: role definition, hiring support, interview panel, a 90-day onboarding plan and handover of the programme built during the retainer.
- Role definition and hiring plan
- 90-day onboarding + full handover
Follows your hiring process
Deal & Audit Support
Short engagements around a specific event: an enterprise client’s security review, due diligence in a funding round, an insurer assessment or a certification audit week.
- Preparation and handling of the technical conversations
- Evidence and answers organised for the event
5–10 day blocks