Tailored Engagement

In the background where possible. Present when it counts.

Not every organisation needs a full-time CISO. I provide oversight on risk, compliance and cyber resilience, tailored to your organisation and priorities.

SECURITY LEADERSHIP WITHOUT A FULL-TIME CISO

Cybersecurity requires ongoing attention. Threats change, legislation evolves, and organisations grow. That’s why structural oversight matters – not only when something goes wrong.

Who is this for?

For organisations that need strategic cybersecurity direction, but for whom a full-time CISO isn’t a fit or a necessity. This is often the case for growing organisations facing stricter regulation, increasing risks and higher expectations from customers and suppliers.

What you can expect

I’m your dedicated point of contact for cybersecurity, governance and compliance. I keep an overview, flag risks, make sure responsibilities are clear and agreed measures are actually carried out.

  • Insight into risks and priorities
  • Guidance on NIS2, ISO 27001, GDPR, the EU AI Act and customer assurance requirements.
  • Clear reporting for management and the board
  • Direction and coordination of external security partners
  • Available for incidents and urgent matters

Not isolated advice. Instead, clear priorities, a fixed point of contact, and visible progress.

Approach

From insight to progress

01

Assessment

An initial conversation to understand the organisation, sector and current situation. What risks are known, what measures are already in place, and where the main points of attention lie.

02

Priorities

Together we determine the desired level of involvement and the main priorities for the period ahead.

03

Ongoing oversight

Regular consultation, follow-up on risks and measures, progress monitoring, and support for key decisions.

04

Quarterly reporting

Clear reporting for management with insight into risks, progress, points of attention, and priorities for the coming period.

Overview

Practical details

Time commitment

8–24 hours per month

Tailored to size and complexity

Duration

Minimum term: 3 months

Cancellable monthly thereafter

Fee

Fixed monthly fee

Clear and predictable, based on the agreed level of involvement.

Notice period

One month

After the minimum term

Suitable for

Typically organisations with 25+ employees

Organisations that need ongoing direction on risk, governance and compliance.

Boundaries

What I don’t do

I don’t carry out pentests, implement software, or build systems. For technical execution, I work together with certified partners. My role is strategic and governance-focused – the link between technology and policy, between risk and decision-making.

Not sure which approach fits your situation? A 30-minute introductory conversation is usually enough to find out.

Schedule a conversation →

Or take a look at the other ways of working together: