Cybervize
vCISO mandate

Who fills the CISO function for you

In a vCISO mandate we fill the CISO function with a person who fits your industry and your frameworks. All profiles on this page follow the same format: roles, standards, certifications, industries and engagement.

Seven profiles: the founder and six self-employed vCISOs. Five are ISO 27001 Lead Auditors, two are CISM certified and two are ISO 22301 Lead Auditors. Their experience covers financial services, telecommunications, energy, industry and the public sector.

The founder, available as vCISO himself

Alexander Busse

Alexander Busse

Founder of Cybervize, available as vCISO himself

Alexander Busse founded Cybervize in 2021 and leads vCISO and interim CISO mandates himself. He has worked in information security for 25 years, most recently as Partner for Cyber Security at PwC and as Director at Deloitte.

Languages
German · English
Engagement
Remote and on site, across Germany and Europe
  • ISO 27001
  • NIS2
  • DORA
  • BSI IT-Grundschutz
  • NIST Cybersecurity Framework
Full profile
Example profiles

Some profiles show the name, others are anonymised.

All of them are self-employed vCISOs.

Financial sector and DORA

Sabrina Gülck

Sabrina Gülck

Security governance and audit remediation, self-employed, available through Cybervize

More than five years of cybersecurity and audit mandates in the risk advisory practice of a Big Four firm, followed by several years as co-founder and managing director of a software start-up. Builds ISMS, security roadmaps and risk management, often starting from audit findings.

Languages
German · English
Engagement
Mostly remote, scope agreed per mandate
  • ISO 27001
  • CMMI
  • BCM and disaster recovery

Head of IT security and cyber resilience in financial services

Example profile, self-employed, available through Cybervize

More than 30 years of IT and leadership experience, most recently as head of IT security at a financial institution. Grew the security organisation there to more than 50 staff and steered a cybersecurity programme with a budget in the tens of millions. Focus: security operating model, cyber resilience and the requirements of DORA and ECB supervision.

Languages
German · English · Spanish
Engagement
DACH region, remote, hybrid or on site
  • DORA
  • ECB supervision
  • NIST Cybersecurity Framework

Information security and BCM in European financial services

Example profile, self-employed, available through Cybervize

More than 20 years in IT and information security at financial services firms, most recently as group information security officer for more than 20 European markets. Now self-employed with security audits and assessments against ISO 27001, DORA and NIS2.

Languages
English · Spanish · German
Engagement
Across Europe, mostly remote, working language English
  • ISO 27001
  • ISO 22301
  • DORA
  • NIS2
  • GDPR

Industry and TISAX

ISMS build-up, TISAX and DORA implementation

Example profile, self-employed, available through Cybervize

Self-employed consultant, auditor and trainer for management systems for several years. Has built ISMS under ISO 27001 and TISAX at industrial service providers and taken them to certification. Most recently DORA and VAIT projects in financial services, before that information security officer of a financial market service provider.

Languages
German · English
Engagement
Across Germany, remote and on site
  • ISO 27001
  • TISAX (VDA ISA)
  • DORA
  • VAIT
  • CMMC
  • ISO 20000-1

Regulated corporate groups

John van Leeuwen

John van Leeuwen

CISO, cyber resilience and business continuity, self-employed, available through Cybervize

More than 35 years of leadership in cyber security, information security, risk management and business continuity, mainly in regulated sectors such as telecommunications, utilities and finance. CISO of Vodafone Germany from 2015 to 2024. Independent since 2025, advising boards and coaching CISOs.

Languages
Dutch · German · English
Engagement
Based in the Netherlands
  • ISO 27001
  • ISO 22301
  • ISO 9001
  • SOX and ITGC

Interim CISO and IT leadership in regulated groups

Example profile, self-employed, available through Cybervize

More than 20 years of leadership in regulated, international environments: as CISO, as head of security programmes and in enterprise architecture. Now self-employed in interim management, filling vacancies as CISO, CIO or CTO.

Languages
German · French · Arabic · English · Dutch
Engagement
On site and remote, international, mandates from three months
  • ISO 27001
  • BAIT and MaRisk
  • GDPR
Back to the vCISO mandate