Interim CISO

An Interim CISO is a Chief Information Security Officer on a temporary basis. They fill the CISO function for a fixed term, for example during a vacancy, ahead of an audit or to stabilise the organisation after a security incident. At Cybervize the engagement is project-based with no platform dependency, typically €8,000 to €15,000 a month. We usually start operationally within 48 hours of contract, subject to capacity and scope.

It is most valuable in three situations: (1) Planned or unexpected CISO transition, illness, parental leave, resignation, or a known upcoming departure. (2) After a cyber attack, immediate crisis response and restoration of your security posture. (3) Audit preparation or audit findings, structured closure of compliance gaps. Rule of thumb: wherever security leadership is needed for a limited period. If you need it permanently, for example for a multi-year cyber maturity roadmap, the vCISO mandate is the right route, from €3,600 a month, with the OdySecure platform included.

Yes, and this is one of the most common triggers. During long-term illness, maternity leave, or parental leave of your CISO, our Interim CISO takes the full role on a fixed-term basis: strategy, reporting to the management board, audit support, incident-response readiness, and ISMS steering. Operational start usually within 48 hours. When your permanent CISO returns, a structured handover follows, with documentation of all measures and open items. If the permanent hire is delayed, the engagement can move into a vCISO mandate.

Information security is the umbrella discipline. It covers the protection of all information, whether digital, on paper, or in people's heads, including data, processes, supplier relationships, awareness, and compliance. IT security is the operational subset focused on the technical infrastructure: networks, endpoints, systems, encryption. The CISO role (Chief Information Security Officer) sits clearly in the information security world and steers the overall strategy, of which IT security is a critical but not the sole part. In the DACH SME market the terms are often used interchangeably; the distinction matters for compliance frameworks like ISO 27001 or NIS-2, which define information security as the umbrella.

An Interim CISO is ideal for short-term vacancies, special projects, restructuring, or in preparation for audits and certifications.

Our Interim CISOs can usually start operations within 48 hours, subject to capacity and mandate scope to address urgent security needs.

Yes, our Interim CISOs have experience with NIS-2, critical infrastructure protection (KRITIS), ISO 27001, DORA and BSI IT-Grundschutz. We support gap analysis, action planning and implementation of regulatory requirements.

Interim CISO: time-boxed, project-based, often on site, no platform dependency, typically €8,000 to €15,000 a month. Deployed during acute vacancies, crises, audit preparation or transition phases. vCISO: an ongoing mandate from €3,600 a month, with the OdySecure platform included in the mandate. Designed for organisations that do not want to build a permanent CISO position. The two services are independent. A transition from Interim CISO into the vCISO mandate is possible, but not the default.

We ensure a structured transition: documentation of all measures, handover to the successor or internal team, and optionally a transition phase with advisory support. If you wish, the engagement moves into a vCISO mandate.

A temporary IT security leader fills critical gaps immediately without the lengthy recruitment process of a permanent hire. As an Interim IT Security Manager, they bring cross-industry experience and can lead cyber security strategies, compliance programs and incident response processes from day one.

An Interim Cyber Security Manager is particularly suitable for mid-market companies and enterprises that need experienced cybersecurity leadership at management level on short notice. Typical scenarios include transition phases after a CISO departure, preparation for NIS-2 or ISO 27001 audits, and establishing a security organization in growing companies.