I act as your part-time Chief Information Security Officer—providing strategic guidance, risk oversight, and compliance management without the cost of a full-time executive. You retain full control; I provide the expertise and bandwidth you're missing.

Who this is for:

Small to medium businesses (10–200 employees) without a dedicated security lead

Startups needing to satisfy investor or client security requirements

Companies managing compliance but lacking strategic oversight

Organizations wanting to build a real security program, not just pass an audit

What’s included (monthly retainer):

Initial deep-dive assessment of your current security posture

Monthly 2-hour strategy call to review risks, priorities, and progress

Risk register management – tracking and prioritizing security risks

Policy maintenance – updates as your business evolves

Compliance guidance – support for ISO 27001, SOC 2, GDPR, or client audits

Vendor security reviews – assessment of third-party tools and partners

Incident response support – on-call guidance if something goes wrong

Deliverable: Ongoing partnership with clear monthly deliverables and as‑needed support.