A senior security lead, a few days a month.
Most SMEs don't need — and can't justify — a full-time security manager. They do need someone who owns the plan, turns up to the management meeting and picks up the phone when a customer audit lands.
Security has no owner.
It sits somewhere between the MD, the finance director and the IT provider. Everyone assumes someone else has it. Questionnaires bounce around inboxes; policies go out of date; nobody tracks whether last year's findings were fixed.
One named person, a fixed number of days.
You get the same consultant every month. They maintain the risk register in Horizon, chase remediation, prepare a short board update, handle supplier and insurer questions, and keep policies current.
Everything in the engagement, set out up front.
Monthly management attendance
A short security slot in your existing meeting.
Risk and action tracking
Register, actions and evidence kept current in Horizon.
Customer and insurer liaison
Questionnaires, audits and renewal questions handled.
What you receive.
- Named consultant
- Monthly board update
- Maintained risk register
- Annual policy review
Built for organisations that need the work done properly.
20–250 person firms
Big enough to have real obligations, not big enough for a full-time hire.
Firms between hires
Cover while you recruit, or to prove the role is needed.
What changes once the work is done.
Accountability
A name against security.
Continuity
The same person who knows your business.
Cost control
A fraction of a full-time salary.
Questions we are asked most often.
How many days a month?
Most clients start at two to four days. It flexes up around audits or projects.
Is this the same as a virtual CISO?
Similar idea, pitched at SME scale. Less strategy theatre, more getting things done.
Will it be the same person each month?
Yes. Continuity is the point.
What's the minimum term?
Usually twelve months, because the first quarter is spent getting things in order.
Discuss a virtual security manager.
A 30-minute call with a consultant, not a salesperson. We'll ask about your setup, tell you honestly whether we can help, and what it would roughly cost.
Book a conversation