Advisory
$4,000/mo
Two days a month
Program oversight, policy review, questionnaire and audit support, monthly reporting, on-call for security decisions.
Offer · Fractional Security and Compliance Lead
From $4,000/month
Delivered by Jorden Britto, CISSP, CCSP. 10 years in regulated environments, 8 in the defense industrial base, including HIPAA-regulated healthcare and SOX-scoped enterprise environments.
- CISSP
- CCSP
- CompTIA SecurityX
- CompTIA CySA+
Who it is for
Companies that need senior security ownership but cannot justify a full-time hire. A full-time CISO runs $250,000 to $400,000 fully loaded. Most organizations under 200 people need a fraction of that person, not all of them.
Tiers
Operational
$7,500/mo
Five days a month
Everything in Advisory, plus hands-on control implementation, vendor security reviews, incident response planning, and running the compliance calendar.
Embedded
$12,000/mo
Ten days a month
Everything in Operational, plus board and customer-facing representation, audit and assessment leadership, and security architecture review.
What you actually get
- A named senior owner for security, someone whose job it is when something happens
- Compliance run on a calendar instead of a crisis
- Customer security questionnaires answered in days, not weeks
- Vendor and third-party risk reviewed before contracts get signed
- Reporting your board and your insurer will accept
- Direct access to a CISSP who has briefed a CIO on risk every two weeks for five years
Terms
Three-month minimum, then month to month. Thirty days notice either direction. Scope reviewed quarterly, tiers change whenever your needs do.
Market context: comparable vCISO retainers run $3,000 to $12,000 per month for small and mid-market organizations, and $200 to $400 per hour for project work.