The appointment owns
The interim CISO assigns incident authority, tests the response chain and leaves a prioritised security plan for the continuing owner.
interim executive recruitment
Hire Interim CISO
Hire Interim Chief Information Security Officer: put a temporary security executive over a defined risk or incident-readiness transition, with authority to implement it and a successor to receive it.
Brief us on this role →Chief Information Security Officer briefChoose a part of the brief
Part 01 / 04
Transition outcome
Write the security change that must be working before the assignment ends.
Part 02 / 04
Authority
State which risk and control decisions the interim can make, escalate or recommend.
Part 03 / 04
Incident continuity
Identify the response team and the escalation chain throughout the assignment.
Part 04 / 04
Handover owner
Name who takes the risk register, decisions and unresolved work at exit.
Hire Interim Chief Information Security Officer: what must the role own?
Write the security change that must be working before the assignment ends.
Transition outcomeWrite the security change that must be working before the assignment ends.
AuthorityState which risk and control decisions the interim can make, escalate or recommend.
Incident continuityIdentify the response team and the escalation chain throughout the assignment.
Handover ownerName who takes the risk register, decisions and unresolved work at exit.
Role reference: Institute of Interim Management guide. The guide frames interim management as a finite assignment with implementation and exit. An interim security leader therefore needs an agreed outcome, authority and successor handover.
What changes when the Chief Information Security Officer is interim?
An interim CISO has a finite assignment and a specific exit. That could be restoring decision rights after a vacancy or implementing an incident plan; it should not be described as indefinite cover when the organisation needs a continuing seat.
interimChoose a part of the brief
Part 01 / 04
Outcome
Write the transition or programme outcome before searching.
Part 02 / 04
Term
Agree the expected end, a review point and what could extend the assignment.
Part 03 / 04
Authority
Give the interim the authority needed to hold the seat during the assignment.
Part 04 / 04
Handover
Name the person or team who takes ownership when the interim leaves.
How would this work in a real brief?
The hiring decision becomes clearer when the work and its boundary are written down together.
Illustrative brief · a leadership vacancy before a resilience review
The former security leader has left. The organisation has incident documents, but the board cannot tell who will make key decisions in a serious event.
The interim CISO assigns incident authority, tests the response chain and leaves a prioritised security plan for the continuing owner.
Another owner retains
The operations team executes incident actions; the board keeps responsibility for material risk acceptance and the next appointee receives the decision log.
How should you assess Chief Information Security Officer candidates?
Put the same work and evidence in front of each candidate before comparing answers.
The evidenceChoose a part of the brief
Part 01 / 04
Implemented outcome
Ask what the candidate changed in a finite security assignment and what evidence remained at exit.
Part 02 / 04
Incident exercise
Give every candidate the same incident scenario and ask who decides, who informs and what is recorded.
Part 03 / 04
Risk escalation
Test how they identify an exception that needs board acceptance.
Part 04 / 04
Successor handover
Ask for the risk, control and incident records they would leave behind.
Acas recommends a consistent, fair selection process: choosing who to interview.
Does this hiring pattern fit the work?
Test the amount of the week, the expected end and the continuity needed before writing the contract.
The working pattern · interim
An interim Chief Information Security OfficerAn executive holds a defined assignment or transition. Agree the outcome, authority and handover before the start.
What must happen before the Chief Information Security Officer starts?
Agree the implemented outcome and a review point.
A clear startChoose a part of the brief
Part 01 / 04
End condition
Agree the implemented outcome and a review point.
Part 02 / 04
Access
Provide risk, audit, incident and supplier records and introductions to decision makers.
Part 03 / 04
Authority
Write the decisions the interim can take and what must be escalated.
Part 04 / 04
Handover
Start a decision and exception log from the first week.
- 1
End condition
Agree the implemented outcome and a review point.
- 2
Access
Provide risk, audit, incident and supplier records and introductions to decision makers.
- 3
Authority
Write the decisions the interim can take and what must be escalated.
- 4
Handover
Start a decision and exception log from the first week.
A useful Chief Information Security Officer brief names the decision, the working pattern and the evidence before it names a candidate.
What should the brief say?
Hire Interim Chief Information Security Officer begins with transition outcome, a stated working pattern and the evidence you will ask every candidate to show.
15 minutes · video or phone
Brief us on a Chief Information Security Officer
Tell us what the role must own, how it will work and when it must start.
- 01A brief built around the decisions and working pattern.
- 02A shortlist of 3–5 with pay or day rate, availability and IR35 position set out.
- 03Five-stage vetting before a candidate reaches you.
Pick a day that suits · live availability
