Virtual CISO / Fractional Cybersecurity Executive

Centric Consulting is seeking an experienced virtual CISO to provide independent, strategic cybersecurity leadership to client organisations on a fractional basis. This is an advisory role, not a day-to-day security operations position. The successful candidate will work alongside established technology and security teams, bringing an experienced, objective perspective that helps leaders evaluate risk, establish priorities, and make well-informed cybersecurity investment decisions.

The role requires deep familiarity with the NIST Cybersecurity Framework (including CSF 2.0) and the ability to assess maturity through a risk-based lens rather than pursuing maximum maturity across every capability. Practical experience across Microsoft Azure, Microsoft 365, Microsoft Purview, and data loss prevention is highly valued. The vCISO will support executive and board-level conversations, translate complex technical issues into clear business choices, and build pragmatic, prioritised security roadmaps that reflect each organisation's risk tolerance and objectives.

• Shape and evolve cybersecurity strategies, maturity objectives, and roadmaps aligned to organisational goals and risk tolerance
• Evaluate existing cybersecurity capabilities and investments to identify opportunities for greater strategic alignment and effectiveness
• Advise executive and board-level stakeholders on governance, enterprise risk, incident preparedness, data protection, and third-party oversight
• Apply deep practical knowledge of NIST CSF (including 2.0) to interpret maturity assessments and translate findings into prioritised recommendations
• Provide independent evaluation of security architectures, vendors, managed service providers, and proposed cybersecurity investments
• Maintain clear separation between strategic advisory responsibilities and operational security execution, ensuring objective oversight

• Proven experience as a CISO, vCISO, senior cybersecurity executive, or strategic security advisor at executive level
• Deep practical knowledge of the NIST Cybersecurity Framework, with CSF 2.0 experience strongly preferred
• Broad expertise across cybersecurity strategy, governance, enterprise risk, vendor oversight, and security investment prioritisation
• Experience with Microsoft Azure, Microsoft 365, Microsoft Purview, DLP, and related data governance and security capabilities
• Strong executive presence with the ability to communicate complex technical risk clearly to board and C-suite audiences
• CISSP, CISM, or CRISC certification preferred; bachelor's degree in a relevant discipline or equivalent professional experience required

Centric Consulting is a management and technology consulting firm built around three principles: enjoying the people you work with, having fun, and doing great work. The firm advises clients on technology, business strategy, and cybersecurity, and is recognised for a collaborative culture that values individuals and long-term professional relationships.