Fractional CISO

Strategic Growth Partners (SGP) is a consulting firm seeking an experienced fractional CISO to serve as the senior information security and compliance leader across both client organisations and SGP's own internal program. The role sits within a growing cybersecurity and GRC practice, reporting to the Chief Information Officer and collaborating closely with client executives, internal IT teams, and compliance partners.

The position involves delivering strategic security leadership alongside hands-on compliance execution, covering frameworks including NIST SP 800-171 and 800-53, CMMC Levels 1 and 2, and ISO/IEC 27001. Responsibilities extend to security assessments, gap analyses, SSPs, POA&Ms, incident response planning, vulnerability management, and executive-level reporting. The successful candidate will also support business development and build reusable methodologies to scale the practice.

• Act as outsourced CISO for multiple client organisations, providing strategic security leadership and executive guidance
• Lead compliance programs aligned with NIST SP 800-171/800-53, CMMC Levels 1 and 2, and ISO/IEC 27001
• Conduct security assessments, gap analyses, and risk reviews, and develop SSPs, POA&Ms, and audit evidence
• Oversee incident response planning, vulnerability management, and security operations in partnership with IT teams
• Deliver executive reporting, security roadmaps, and board-ready presentations across client and internal engagements
• Recruit and manage subcontracted vCISOs as the practice scales, ensuring consistent delivery quality

• At least 8 years of information security experience including senior leadership as a Security Director, VP, CISO, or vCISO
• Hands-on expertise with NIST SP 800-171/800-53, CMMC Levels 1 and 2, ISO/IEC 27001, and associated compliance documentation
• Demonstrated ability to manage multiple client engagements simultaneously with strong executive communication skills
• Bachelor's degree in cybersecurity, information technology, risk management, or a related field, or equivalent experience
• Preferred certifications include CISSP, CISM, CCISO, ISO/IEC 27001 Lead Implementer or Lead Auditor, and CMMC CCP or CCA

Strategic Growth Partners (SGP) is a professional services and consulting firm delivering cybersecurity, GRC, and business advisory services to clients across multiple time zones. The firm operates with a remote-first model and is committed to a collaborative, inclusive work environment.