Fractional CISO

About the role

Many growing organisations need senior security leadership but not a full-time CISO. As a full-time member of our team, you will act as the fractional CISO for several clients at once: owning their security strategy, building their programmes, representing security to their leadership and boards, and drawing on EthicalHat's SOC, testing and advisory teams to deliver.

What you'll do

• Act as the security leader for multiple client organisations, typically as their named CISO or security advisor
• Assess security posture and build multi-year security strategies and roadmaps aligned with business goals
• Establish and run security governance: policies, risk management, metrics and reporting to executives and boards
• Lead compliance programmes such as ISO 27001, SOC 2, PCI DSS, HIPAA and data protection requirements
• Oversee incident response readiness and act as executive lead during major incidents
• Guide clients on secure adoption of cloud and AI, including AI governance
• Manage vendor and third-party security risk, and support clients in customer security reviews
• Mentor EthicalHat consultants and help shape the CISO as a Service offering

What we're looking for

• 15+ years in information security, including at least 5 years in a CISO, deputy CISO or head of security role
• Proven experience building security programmes and reporting to executive leadership and boards
• Deep knowledge of security frameworks and regulations (ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, DPDP)
• Strong understanding of cloud security, security operations and incident response
• Excellent executive communication, with the ability to explain risk in business terms
• Experience working with clients in the US, UK or Europe

Nice to have

• CISSP, CISM, CCISO or equivalent certification
• Experience leading security through audits, acquisitions or major incidents
• Background in regulated industries such as financial services, healthcare or SaaS

How to apply

Email your CV to info@ethicalhat.com with “Fractional CISO” in the subject line. A short note on the work you’re proudest of helps us a lot. We’ll get back to you after reviewing your application.