Board-ready security
leadership.
Without the $300K hire.
Technology companies at Series A through mid-market get the same security program that powered four consecutive SOC 2 Type II audits with zero exceptions — on a monthly retainer.
Speaker at DEF CON · RSA · FBIIC
Four service products. One senior practitioner.
Transparent pricing. No retainer-for-retainer's-sake. The right engagement for where your company actually is.
Fractional CISO Retainer
Ongoing security program leadership for Series A–C technology companies. Risk management, compliance oversight, board reporting, policy development, and strategic guidance.
Learn MoreSOC 2 / ISO Readiness Sprint
Gap assessment, control design, policy development, and audit preparation with a hard deadline in mind. Four consecutive audits with zero exceptions.
Learn MoreAI Security Governance
AI use case inventory, risk assessment against NIST AI RMF and EU AI Act, Acceptable Use Policy, vendor AI risk framework, and board briefing package.
Learn MoreHourly Advisory
On-demand senior security guidance. Often the starting point for engagements that convert to retainer relationships.
Book NowTechnical depth that most executives stopped having years ago.
Most vCISOs are policy writers. I've architected Zero Trust deployments, built DNS security infrastructure from scratch, deployed AWS Bedrock for production teams, and stood up SOC 2 programs that survived four consecutive audits without a single exception.
I've also presented that work at DEF CON main track and RSA Conference — because credibility with practitioners is as important as credibility in the boardroom.
Full BackgroundThirty minutes. Free. No pitch deck.
Tell me where your security program is today and what's driving urgency. I'll tell you honestly whether and how I can help.