Chief Information Security Officer · Fractional Jobs
Fractional CISO Jobs · Security leadership roles
Explore fractional CISO jobs across the UK for senior security leaders.
This is the Chief Information Security Officer role; employers can use the dedicated hiring brief for recurring days, or compare permanent, interim and employed part-time patterns.
- £1,200–£2,000 a day · Optima Europe 2026
- 1–3 days a week
- 3–5 candidates on every shortlist
- 5 stages of vetting
How a brief runswhat we undertake
- 01Brief30-MINUTE SCOPING CALLDay 0
- 02Shortlist of 3–5VETTED · RATE BENCHMARK · IR35After the brief
- 03InterviewsYOU MEET THE SHORTLISTYour diary
- 04Scoped startFIRST-MONTH OUTCOMES AGREEDYou set the date
- 05Fractional, interim and permanentIR35 POSITION SET OUTOn every brief
Shortlist3–5
15 minutes · video or phone
Book 15 minutes to talk through the brief
Tell us the scope and the days a week. We come back with fractional CISO candidates, their day rates and availability.
- 0115 minutes, video or phone
- 02We scope the role and the days a week
- 03A shortlist of 3–5 after the call
- 04Fractional, interim and permanent briefs
Pick a day that suits · live availability
Fractional recruitment works differently from a permanent search — shorter, scoped by days a week, and priced on the engagement. Send a CISO brief and we come back with a shortlist of three to five vetted candidates.
Fractional and virtual CISO jobs · last 3 months
Fractional CISO jobs on the board
01/ the cross
Where a permanent hire becomes cheaper.
Move the day rate and the days a week: the rising line is a month of part-week cost, the flat line a permanent hire’s month. Where they cross, the seat should go full-time.
At 2.4 days a week a permanent hire costs less.
Our arithmetic. Permanent a month = the salary ÷ 12 plus 15% employer NI, plus the 30% search fee spread over 12 months — the calculator’s inputs. Hover, tap or use the arrow keys for each step.
Permanent = the £135,250 Robert Half 2026 median salary. The full calculator below adds the months, the totals and the currency tabs.
- The fractional CISO at 2 days a week never passes permanent inside 24 months.
- Interim passes permanent at month 3.
Our arithmetic, cumulative. Permanent = the salary’s 30% search fee in month 0, then salary ÷ 12 plus 15% employer NI each month. Interim = the midpoint of the published interim band (£1,250 a day, Barclay Simpson) × 5 days × 4.33 weeks. Hover, tap or use the arrow keys for each month.
02/ the route
Fractional, interim or permanent?
Four taps. The answer names the route for the seat and the page that covers it.
The route · Fractional
A fractional CISO.The work fills part of the week, so buy the days it needs.
A fractional CISO holds the seat on agreed days for as long as the seat is needed, and works for other clients on the rest.
The route · Interim
An interim CISO.The work fills the week, and it has an end: a programme, a cover, a transaction.
An interim CISO takes the seat full time for that stretch and hands it over when it is done.
The route · Interim, then permanent
Interim now, a permanent CISO after.The seat is full time and long term, and the need is now.
An interim CISO holds it while the permanent search runs, so the seat is not left empty.
The route · Permanent
A permanent CISO.A full-time seat that sits at the table for years is a permanent hire.
There is time to run a search, so run one.
03/ the board
What the board holds.
A read of the roles on the board above, counted as they stand: how each is engaged, whether the posting gives the days and the rate, and where the work happens.
On this board, last 90 days · 1 role · Fractional CISO
Engagement
- Contract1
Days a week
- Stated in the posting0
- Not stated1
Day rate
- Verified rate0
- Estimated (est)0
- Rate not stated1
Work arrangement (as the job feed classifies it)
- Remote0
- Hybrid0
- On-site1
Newest posting on the board: 16 Oct 2026.
04/ definition
What is a fractional CISO?
A fractional CISO is a part-time Chief Information Security Officer.
Not a consultant, not an MSSP: the CISO, 1–3 days a week.
Four ideas define the model.
01 · cadence
A chief information security officer, 1–3 days a week.
Senior, certified CISO capability across a defined slice of the week. You get the security leadership you need without a full-time salary or a five-day commitment.
02 · role
Owns security — not just an audit.
Unlike a consultant or pen-tester, a fractional CISO is in the leadership team: owns the security programme, risk register, compliance roadmap and incident response.
03 · terms
Paid by the day, not a salary.
A fractional CISO invoices a day rate for the days worked rather than drawing a full-time package — Optima Europe puts the UK band at £1,200–£2,000 a day (2026).
04 · horizon
A mandate, not a tenure.
Scoped to an outcome — ISO 27001 certification, SOC 2 compliance, post-breach recovery — often ending in a clean handover to a permanent CISO.
05/ scope
CISO responsibilities.
What a fractional CISO owns versus what they delegate — to your IT team, a managed security provider or a specialist supplier.
- Security strategy & roadmap
- Risk register & appetite
- Compliance programmes (ISO 27001, SOC 2)
- Incident response planning
- Board reporting & metrics
- Security team structure
- Vendor selection & management
- Policy & governance framework
- 24/7 SOC monitoring
- Hands-on penetration testing
- Day-to-day ticket resolution
- Firewall configuration
- Vulnerability patching
- Security awareness training delivery
- Log analysis & SIEM tuning
- Identity management operations
06/ alternatives
Against the alternatives.
How a fractional CISO compares with a virtual CISO, a managed security provider, a security consultant and a full-time appointment.
→ The labels overlap. Fractional CISO = embedded, day-rate leadership. Virtual CISO = remote-first, usually a monthly package — see hire a virtual CISO.
→ A fractional CISO leads security. An MSSP operates it.
→ Fractional CISOs run the security function. Consultants advise on it.
→ Cypro puts a virtual CISO at 5–10 days a month roughly 40–70% cheaper than a full-time CISO — the saving narrows as days rise.
07/ the choice
Fractional CISO or interim CISO: which the seat needs.
A fractional CISO holds the seat for part of every week, on an ongoing basis: the same person, a set number of days, for as long as the business needs that level of leadership.
An interim CISO covers the seat full-time for a fixed term: a vacancy, a transaction or a turnaround, then a handover to a permanent hire.
Ask which problem you have.
If the work is senior but does not fill a week, buy part of the week.
If the work fills every day and has an end date, buy the days in a block.
The calculator above prices the part-week route at your days a week and shows where a permanent hire becomes the cheaper seat.
08/ vocabulary
Fractional, virtual, interim, contract — what each title actually means.
Companies searching for CISO hiring or a CISO for hire rarely say “fractional”.
They mean one of four engagements, and the right one depends on how many days the work needs and who has to answer for it.
AN OWNER
Fractional CISO
One named person, in your business one to three days a week, ongoing, accountable for the security programme rather than a deliverable. Usually priced by the day.
A PACKAGE
Virtual CISO (vCISO)
Remote-first and usually sold as a monthly package — Cypro publishes £3,000–£15,000 a month. See hire a virtual CISO.
A FIXED TERM
Interim or contract
Full-time for a fixed term — cover for a departure, a remediation, an incident aftermath. Barclay Simpson publishes contract CISO rates of £1,000–£1,500+ a day. See interim CISO jobs.
A DECISION
Security consultant
Engaged for an assessment, a gap analysis or a certification readiness review, and delivers a document. Scope it as a project.
Which you want depends on whether you need an owner or a decision.
If the security question will still need someone accountable next quarter, it is a seat, and fractional is the lightest way to fill it at this seniority.
This is our reading of how the terms are used in the UK market, not a published definition.
09/ economics
Cost to hire a fractional CISO, UK 2026.
Published figures only, each with its source.
Scope rises with regulatory load and estate complexity — a first security hire at a startup, ISO 27001 or SOC 2 at a scale-up, a multi-framework enterprise estate, a regulated financial services or healthcare firm.
No source publishes a sector-by-sector band; Cypro puts rates above £2,000 a day on financial services, healthcare and M&A work.
Published UK day-rate bands · £ a day · the marker is the calculator’s day rate
- Fractional£1,200–£2,000Optima Europe£1,600
- Interim£1,000–£1,500Barclay Simpson
- Permanent, per day£438–£735Robert Half 2026 salary ÷ 220 days
The permanent band is the published salary ÷ 220 working days — our arithmetic, for comparison only.
Two days a week across a 46-week year at the Optima Europe band is £110,400–£184,000 in day fees — our arithmetic (92 days × £1,200–£2,000).
10/ economics
Part-time CISO cost.
Model the cost against a full-time CISO, or what one fractional mandate earns.
The slider runs across the published band for a fractional CISO: £1,200–£2,000 a day (Optima Europe).
Cost over 12 months
£166,400
104 working days · 2 d/wk · 12 mo · before tax
Fractional costs less over 12 months£29,713
Fractional CISO, 12 months£166,400
Fractional CISO, a month at 2 d/wk£13,856
Permanent CISO, same period£196,113
Fractional CISO, 12 months$220,463
Fractional CISO, a month at 2 d/wk$18,358
Permanent CISO, same period$259,829
Converted from £ at $1.3249 per £1 (Bank of England spot rate), 2 Oct 2026. A conversion, not a US market rate. Source ↗
Fractional CISO, 12 months€195,453
Fractional CISO, a month at 2 d/wk€16,275
Permanent CISO, same period€230,354
Converted from £ at €1.1746 per £1 (Bank of England spot rate), 2 Oct 2026. A conversion, not a EU market rate. Source ↗
Our arithmetic, indicative. Permanent = the £135,250 Robert Half 2026 median salary pro rata for the same months, plus 15% employer NI, plus a 30% search fee on the annual base (UK retained search runs 25–35%, Headhunters.co.uk). Excludes pension, bonus and equity.
11/ the week
How a week divides.
The days you buy are yours; the rest of the week goes to other clients.
Move the days a week in the calculator above and the week redraws.
Illustration only: one way a fractional CISO’s week can divide at 2 days a week for you. Each block is half a day.
12/ tax
Is the day rate tax-deductible?
The general position under UK rules, with the HMRC source for each point.
Not tax advice: check your own case with your accountant.
01 · DEDUCTIBLE
The fees are a business expense
A fractional CISO’s fees, like a salary, are deductible against profits when incurred wholly and exclusively for the trade (HMRC BIM37000). At the 25% main rate, each £1,000 of fees costs a profitable company £750 after relief.
02 · EMPLOYER NI
Employer NI follows IR35 status
A permanent CISO carries employer National Insurance at 15% above £5,000 a year. A fractional CISO engaged through their own company carries none when the engagement is outside IR35; inside IR35, the fee-payer deducts tax and NI and pays employer NI. Status depends on how the engagement runs in practice.
03 · WHO DECIDES
IR35 status, by company size
Medium and large clients determine the status themselves; for a small private-sector client, the fractional CISO’s own company decides (HMRC off-payroll guidance).
13/ decision
When to hire a fractional CISO.
Four scenarios where it pays to hire a fractional CISO — and where fractional CISO jobs deliver the most for UK businesses.
Which sounds like you?
ISO 27001, SOC 2 or a sector-specific certification needed for growth or a contract. Consultants can prepare the documents; someone has to make the decisions the documents describe, and give the board assurance.
- → Credible leadership for a certification with a date
A breach has happened. You need credible leadership to engage the regulator, rebuild the programme and restore board and customer confidence.
- → A named owner after the incident
Regimes such as the FCA’s operational resilience rules in the UK, and NIS2 and DORA for firms operating in the EU, put accountability for security and ICT risk with senior management.
- → Named accountability · formal risk ownership · audit readiness
Due diligence needs credible security leadership and a mature programme: security DD preparation, risk quantification, and answers an investor or acquirer will accept.
- → Board-ready security leadership for the deal
14/ the buyer’s guide
CISO recruitment: how to hire a fractional CISO.
Scope the mandate first: the framework or deadline driving it, the regulator or customers asking, the size of the estate and the team, and the days a week the work needs.
Set the budget against the published bands above — £1,200–£2,000 a day for a fractional CISO (Optima Europe), or £3,000–£15,000 a month for a virtual CISO package (Cypro).
Assess on track record leading security at your stage, not certificates alone: ask for the last certification they owned end to end, the last incident they ran, and a board paper they wrote.
Take references from recent clients.
Then start with a defined first phase — a gap analysis and roadmap, or the first stage of a certification — before settling into a steady weekly cadence.
If you are looking at chief information security officer recruitment agencies for a permanent hire, that is usually a retained search: UK retained search fees run 25–35% of approximate first-year base salary, with £30,000–£40,000 minimum fees common at established firms (Headhunters.co.uk, March 2026).
We recruit fractional, interim and permanent CISOs: a shortlist of 3–5, each with day rate or pay, availability and IR35 position set out.
15/ the broad hire
Hire a CISO — fractional, interim or permanent.
Organisations that need to hire a CISO have four arrangements to choose from.
A permanent CISO is an employee, full-time, owning security risk, the security programme and the team that runs it.
An interim CISO is full-time for a fixed term — after an incident, ahead of an audit, or while a permanent search runs.
A fractional CISO is one named person who owns the security programme for part of each week and answers to the board, ongoing.
A virtual CISO covers similar ground remote-first, usually bought as a monthly package.
Which shape fits comes down to how much CISO-level work there is each week.
If a large estate, a security team to lead, regulator contact and incident readiness fill the week, hire a CISO permanently.
If the need is a certification, a risk register the board can read, or a policy set customers will accept, a fractional hire covers it without a full-time salary — fractional CISO cost sets out the published figures, and fractional CISO services covers buying the work as a defined service.
However you hire a CISO, the brief is built from the same parts: scope, stage, the frameworks or deadlines in play, days a week, budget and IR35 position.
We work from it to a shortlist of 3–5, and you interview.
For a CISO working through their own company, status depends on how the engagement runs in practice, not on the job title in the contract — check it with HMRC’s CEST tool and our IR35 guide.
16/ structure
Fractional CISO services: scope, contract and terms.
A fractional CISO engagement sets out the scope, the days a week, the day rate and the notice period.
IR35 status depends on how the engagement runs in practice, and a medium or large client makes the status determination.
HMRC looks at the three points below.
Reference: HMRC off-payroll working (IR35) guidance and the CEST tool.
See the IR35 guide.
TEST 1 / SUBSTITUTION
Right of substitution
Whether the CISO could send a suitably qualified substitute, and whether that right is real in practice.
✓ In the contractTEST 2 / CONTROL
Control
Whether the company directs how, when and where the CISO works, or defines the outcomes and leaves the method to them.
✓ In the contractTEST 3 / MUTUALITY
Mutuality
Whether the company must offer work beyond the agreed mandate, and whether the CISO must accept it.
✓ In the contract17/ for security leaders
CISO jobs: fractional, interim and contract roles.
Most CISO jobs advertised in the UK are permanent, and this page does not list those.
What it carries are the other routes into the seat: fractional roles of one to three days a week, interim and contract CISO roles for a fixed term, and part-time security leadership.
The board above shows each posting as it is advertised, with the day rate where the posting states one.
What the roles ask for is consistent.
The UK government’s chief information security officer role description sets out the remit most employers work to: a security strategy that supports the organisation’s own, a view of risk across the organisation reported to the board, readiness to detect, respond to and recover from an attack, and a security-aware culture.
Postings commonly ask for a recognised certification — ISC2’s CISSP or ISACA’s CISM — alongside a record of leading certification, incident and board work.
For fractional work, the portfolio matters as much as the CV: a CISO with several clients needs clear terms on incident cover and on conflicts between clients.
See interim CISO jobs for full-time fixed-term roles and remote fractional jobs for remote security leadership.
18/ what the board expects
CISO hiring: what boards and regulators expect.
CISO hiring is increasingly led by the board.
The NCSC’s Cyber Security Toolkit for Boards, built around the government’s Cyber Governance Code of Practice, sets out how directors should oversee cyber risk — and a board that has to oversee it needs someone to report to it.
That is often the first reason to hire a CISO, fractional or full-time.
Decide what the hire must deliver first.
For many smaller companies it is a baseline: the government-backed Cyber Essentials scheme covers the most common internet-based threats, and a growing number of organisations ask suppliers to hold it.
For companies handling personal data at scale, it is showing that security is appropriate to the risk, as the ICO’s guide to data security requires under UK GDPR.
For regulated firms, it is the accountability their regulator expects.
Then hire to that outcome.
A baseline, or a certification with a date, suits a fractional CISO on one to three days a week; running a large security team day to day needs a full-time seat.
The recruitment guide above covers how to scope and assess candidates; to compare costs, see fractional CISO cost.
19/ process
How we vet every candidate.
The CISO-specific checks inside our five-stage vetting process, undertaken on every brief before a candidate reaches your shortlist.
- 01
Security credibility
Verify a real track record leading security at your stage — not just an audit or pen-testing background.
SOURCING - 02
Certification check
Validate certifications (CISSP, CISM, sector-specific) and that they are current.
VERIFICATION - 03
Reference validation
We speak to recent clients and boards ourselves: real outcomes, not just tenure.
DUE DILIGENCE - 04
Shortlist delivery
3–5 candidates, each with day rate, availability, fit and IR35 position set out.
SHORTLIST OF 3–5
20/ the terms
What to get right when you hire.
Five things to settle before a fractional CISO starts, so the days you buy go on the work.
01
The outcome, not the hours
Write down what has to be true at three, six and twelve months. Days a week follow from that list, not the other way round.
02
The days and the review
Fix the days a week, which days, and a review point where either side can change them. Most of the value is in the rhythm.
03
Access and authority
Put in writing what the role can see, sign and decide: systems, data, budget and the board. A part-week leader without access is an adviser.
04
How it ends
Agree notice on both sides and the handover: documents, logins and who inherits each piece of work.
05
Status, early
Settle how the engagement will run before it starts, because IR35 status follows the working practice. See the IR35 guide.
21/ questions
Questions, answered.
Common questions about hiring and working as a fractional CISO.
A part-time chief information security officer who owns your security programme within a defined scope — risk management, compliance, governance and incident response.
Not a consultant, not an MSSP: the CISO, 1–3 days a week.
The published UK band is £1,200–£2,000 a day (Optima Europe, 2026); at two days a week that is £2,400–£4,000 a week (our arithmetic).
Optima Europe puts two-to-three-day weekly retainers at £8,000–£18,000 a month.
For comparison, Robert Half puts the UK median salary for a permanent CISO at £135,250 (Robert Half, 2026), before employer on-costs; Cypro puts a full-time CISO at £180,000–£270,000 fully loaded.
Use the calculator above for your numbers.
Yes — that’s exactly what a fractional CISO is: a Chief Information Security Officer working 1–3 days a week, embedded in your leadership team and owning the security programme, risk register and compliance roadmap.
The terms overlap, and many providers use them interchangeably.
In practice a fractional CISO is usually embedded — in the room for board meetings, owning risk formally, leading the team — and priced by the day.
A virtual CISO is usually remote-first and sold as a monthly package: Cypro publishes £3,000–£15,000 a month, and £3,000–£6,000 for a smaller business taking 4–6 days a month.
The question worth asking either way is whether you get a named individual or a pooled service.
We run searches for both through the same brief — see hire a virtual CISO.
Usually, yes.
“CISO for hire” is how many buyers search for a senior security leader engaged through their own company rather than employed.
The distinction that matters is cadence: one to three days a week, ongoing, is fractional; five days for a fixed term is interim.
Look for CISSP, CISM or CCSP as a baseline.
For regulated sectors, specific qualifications such as QSA (PCI DSS) or CISA (audit) matter.
Experience trumps certificates, though: ask for the last certification programme they owned end to end.
Submit your brief and we shortlist 3–5 fractional CISOs, each with day rate, availability, fit and IR35 position set out.
You interview and choose.
Yes.
We recruit fractional, interim and permanent CISOs: a shortlist of 3–5, each with pay or day rate, availability and IR35 position set out.
If you use a retained search firm instead, UK retained search fees run 25–35% of approximate first-year base salary (Headhunters.co.uk).
Many companies bring in a fractional CISO first, and use them to write the permanent brief.
It depends on how the engagement runs in practice — control, substitution and mutuality of obligation — not on the title.
A medium or large client makes the status determination; HMRC’s CEST tool is the reference.
Both, in that order.
Set the baseline first — Cyber Essentials for the most common threats, and security appropriate to the risk under UK GDPR — then make sure the board can oversee cyber risk, which the NCSC’s Toolkit for Boards sets out.
A baseline or a certification with a date suits a fractional CISO; running a large security team needs a full-time one.
It can be.
No source publishes a count of fractional CISO demand, so we will not quote one.
The pressure is real, though: certification (ISO 27001, SOC 2), customer security reviews, insurers, and regimes such as the FCA’s operational resilience rules — and NIS2 and DORA for firms operating in the EU — all need someone to own security at board level, and many firms that need that are not yet ready for a full-time CISO.
At the published UK band of £1,200–£2,000 a day (Optima Europe, 2026), two days a week across 46 weeks is £110,400–£184,000 from one client — our arithmetic.
The calculator above models it.
Check your own IR35 and tax position with an accountant.
CISSP or CISM are table stakes, and sector-specific qualifications (ISO 27001 Lead Implementer or Auditor, QSA, CISA) help in the sectors that ask for them.
Cypro puts rates above £2,000 a day on financial services, healthcare and M&A work.
But track record matters most.
No source publishes CISO demand by sector, so we will not rank them.
The pressure concentrates where regulation and customers ask hardest: financial services, healthcare and SaaS selling to enterprise buyers, and any company processing cards (PCI DSS) or personal data at scale.
When we run a search, we look at sector, certifications, the framework involved and your stated availability.
Roles on the board are real postings from our jobs feed; each card shows the day rate only where the posting states one.
We do not grade candidates or roles.
Yes, if you want fractional, interim or contract work.
The board above carries CISO jobs and security leadership roles across the UK — London, regional, and many remote or hybrid; each card shows the location the posting gives.
It does not carry permanent CISO roles.
See remote fractional jobs and interim CISO jobs.
No. Browsing the board and applying is free..
Usually a record of leading security at board level — a certification programme, an incident, a risk register — plus a recognised certification such as CISSP or CISM.
The UK government’s CISO role description is a good summary of the remit employers work to.
Book 15 minutes · shortlist of 3–5
Bring the brief.
We architect the team.
A shortlist of 3–5. Five-stage vetting. IR35 position on every brief.
Book a call or submit your fractional CISO brief; we come back with a shortlist of 3–5 candidates.
Browse the fractional and interim CISO roles from our jobs feed, or get in touch about the searches we run.
