Interim CISO

Your CISO is gone. The responsibility isn’t.

When security leadership becomes unavailable, I step in. Ensuring continuity from day one.

Temporary coverage of the CISO role

Audits don’t wait. Suppliers keep asking questions. The board expects answers. Whether your CISO has left, is unavailable, or the role has yet to be filled.

Who is this for?

For organisations that require temporary CISO leadership due to a departure, extended absence, open vacancy, or the creation of the role for the first time.

What you can expect

I temporarily take on the CISO role, ensuring continuity and keeping key responsibilities moving.

  • Available immediately, with no lengthy onboarding
  • Primary point of contact for the board, IT and external regulators
  • Continuity across audits, supplier management and incident response
  • Structured handover to a permanent successor

No leadership vacuum. Instead, continuity, oversight and clear direction.

Approach

Continuity from day one

01

Assessment

A conversation with management and/or HR about the situation, the urgency and the expectations. Which responsibilities are currently uncovered, and what needs to be arranged in the coming weeks?

02

Transition

Insight into ongoing workstreams, access to systems and documentation, and introductions to the team and relevant external parties.

03

Operational

Fully functioning as Interim CISO, providing leadership, oversight and decision-making where required.

04

Handover

Once a permanent successor is in place, I transfer knowledge, complete the handover and step out of the role in a controlled manner.

Overview

Practical details

Duration

3 months – 1 year

Depending on the situation

Time commitment

Multiple days per week

Tailored to urgency and scale

Fee

Based on the required level of involvement and duration

Fixed weekly or monthly arrangements available

Notice period

One month

Unless otherwise agreed

Suitable for

Typically organisations with 50+ employees

Requiring temporary security leadership

Boundaries

What I don’t do

I don’t carry out pentests, implement software, or build systems. For technical execution, I work together with certified partners. My role is strategic and governance-focused – the link between technology and policy, between risk and decision-making.

Not sure which approach fits your situation? A 30-minute introductory conversation is usually enough to find out.

Schedule a conversation →

Or take a look at the other ways of working together: