Fractionals Send your requirement
A woman writing code on two monitors beside an arched window

Hire a fractional CISO

Fractional CISO

A fractional CISO is a senior security leader who works for you part of the week. They own your security programme, answer customer security questionnaires and tell the board where the risks are. Tell us what you need and we send you people who fit.

Send your requirement
  • No deposit to get started
  • Every requirement read by us
  • A best-fit shortlist, not a pile of CVs
  • One agreement, one invoice

What a fractional CISO does

A fractional chief information security officer owns security for the business. They work out what you need to protect and from what. They set the policies and controls, decide what to buy and what to build, and make sure someone responds properly when something goes wrong.

For many smaller companies, the trigger is a customer. A large buyer sends a security questionnaire or asks for a certificate, and suddenly someone senior needs to own the answer.

vCISO or fractional CISO

In security, vCISO or virtual CISO is the more common label. Some people use it for a CISO provided as a service by a security firm, often with tools included. They use fractional CISO for an independent leader who works directly with the company. Many use the two labels for the same thing.

Through us you choose a named security leader, on one agreement and one invoice. What matters is the work you agree, not the label.

You will also see CSO, chief security officer. Some companies use it for a wider seat that covers physical security and fraud as well as information security. Others use it as another name for the CISO. Tell us which you mean in your requirement and we look for people who have held that seat.

Tell us the role and the hours. We send you a shortlist of people who fit.

  • No deposit to get started
  • Every requirement read by us
  • A best-fit shortlist, not a pile of CVs
  • One agreement, one invoice
Send your requirement

What a fractional CISO usually owns

  • Two people talking through a system diagram on a whiteboard
    Risk assessment A plain view of what could go wrong, how likely it is and what it would cost the business.
  • Two women leaning over printed charts spread across a table
    Policies and controls Access control, data handling, supplier risk and incident response, written to fit how you really work.
  • A woman explaining a hand drawn diagram on a whiteboard to two colleagues
    Customer assurance Answering security questionnaires and preparing for the audits and certificates your buyers ask for.
  • A woman explaining a hand drawn diagram on a whiteboard to two colleagues
    Board reporting Regular, plain reporting on security risk for the leaders and the board.
  • A man on a phone call at dusk with a city out of focus behind him
    AI security Rules and controls for how staff and products use AI tools and data.

Fractional CISO or fractional CTO

Fractional CISO

  • Owns security risk, policy and compliance
  • Speaks for security to customers, auditors and the board

Fractional CTO

  • Owns technology direction, architecture and engineering
  • Builds security into the product, guided by the CISO's policies

What to look for, and how to hire through us

Look for someone who has taken a company of your size through the security reviews and certificates your customers care about. Ask how they would decide what to fix first, and how they explain risk to leaders who are not technical. If you handle regulated data, check their experience fits your sector.

Send your requirement with what is driving the need and the systems you run. There is no deposit. We read it ourselves and send a shortlist of people who fit, with each person's CV and a short note on why. You talk to whoever you like and choose. You pay our fee only when someone starts, on one agreement and one invoice with us.

Send your fractional CISO requirement

Tell us what is driving the need, such as a customer review, an audit or an incident.

  • No deposit to get started
  • Every requirement read by us
  • A best-fit shortlist, not a pile of CVs
  • One agreement, one invoice

Where fractional security leaders are based

FAQ

Fractional CISO questions

What is a fractional CISO?

A senior security leader who owns security strategy, policy and compliance for a company part of the week, usually while doing the same for other companies.

What is the difference between a vCISO and a fractional CISO?

Often nothing. Where people draw a line, a vCISO is provided as a service by a security firm and a fractional CISO is an independent leader hired directly. Both work part of the week.

vCISO or fractional CISO: which is right for your business?

If you want a bundled service with tools and monitoring from one firm, a vCISO service may suit. If you want a senior person who owns security inside your leadership group, a fractional CISO hired directly usually fits better.

Is a CSO the same as a CISO?

Sometimes. A chief security officer can hold a wider role than information security, such as physical security, fraud or safety. A CISO focuses on information and cyber security. Many smaller companies use the titles for the same seat.

What is the difference between a fractional CISO and a fractional CTO?

A CISO owns security risk and compliance. A CTO owns technology direction and engineering. They work closely together. In smaller companies the CTO sometimes covers security until a CISO is needed.

How do I vet a fractional CISO before hiring?

Ask for examples of security programmes they built at companies like yours. Ask how they handled an incident. Ask how they would prepare you for the reviews your customers run.

Explore more