Hire a fractional CISO in the UK
A fractional CISO owns security posture without the cost of a full-time hire most companies cannot yet justify. In practice they are often hired because an enterprise customer sent a security questionnaire nobody could answer.
A fractional CISO in the UK charges £900–£1,500 a day as of 2026, typically one to three days a week, according to the getoperators day-rate dataset.
What does a fractional CISO do?
- Security strategy proportionate to your actual risk, not a generic checklist
- ISO 27001, SOC 2 and Cyber Essentials: the certification companies keep asking for
- Security questionnaires and enterprise procurement reviews
- Incident response planning, before you need it rather than during
- Vendor and supply chain risk, which is where a lot of exposure hides
When do you need a fractional CISO?
- An enterprise deal is blocked on a security review you cannot pass
- You handle sensitive data and nobody senior owns the risk
- You need ISO 27001 or SOC 2 and have no idea where to begin
- You had an incident, or a near miss, and it exposed how little was in place
How much does a fractional CISO cost in the UK?
Among the highest fractional rates, driven by certification work and regulated sectors.
Rates are set by the operator and paid to them directly.
What does a fractional CISO cost in each city?
The day rate moves with the market, and so does the paperwork behind the engagement. CISO in London (£900 to £1,500). That is a day rate for the seat held one to three days a week, with the full-time comparison beside it.
Outside the UK this seat runs $1,200 to $2,300 a day in the US and AED 4,000 to AED 7,500 a day in the UAE.
Is a fractional CISO worth it against a full-time hire?
A penetration test finds vulnerabilities at a point in time. A managed security provider watches your systems. A CISO decides what risk you accept, owns the certification programme, and is the person an enterprise buyer or regulator wants to speak to.
The longer version is on fractional vs interim vs full-time.
How do you choose a fractional CISO?
- Certification experience specifically, if that is what is blocking you
- Sector matters: fintech, health and public sector each carry different obligations
- Someone who talks about business risk rather than only tooling
- Ask whether they will do the certification work or just advise on it, and get that clear
The full version, with six interview questions and what a strong answer sounds like, is the guide to hiring a fractional CISO.
Fractional CISOs on the bench
See every CISO on the bench. Names are shown in full once an operator accepts your booking.
Common questions about hiring a fractional CISO
What is a fractional CISO?
A fractional CISO is an experienced security leader who owns your security posture part-time: the policies, the controls, and the questionnaire blocking your enterprise deal, usually one to two days a week.
What does a fractional CISO cost in the UK?
Typically £900 to £1,500 a day, among the highest fractional rates. Many engagements are one to two days a week during a certification push, then reduce to a day or two a month for maintenance.
Can a fractional CISO get us ISO 27001 or SOC 2?
Yes, and it is one of the most common reasons companies hire one. Expect three to six months for ISO 27001 depending on your starting point. Confirm up front whether they are doing the work or advising on it, because both models exist at very different prices.
We are small. Do we really need a CISO?
Often not until something forces it, and then it is urgent. The usual trigger is an enterprise customer whose procurement process requires answers you cannot give. At that point a fractional CISO is the fastest route to an unblocked deal.
What is the difference between a CISO and a penetration test?
A pen test finds technical vulnerabilities on a given day. A CISO owns the whole security posture: policy, process, certification, vendor risk and incident readiness. You will likely want both, and the CISO will tell you when to book the test.
Do you take a commission on a fractional CISO engagement?
No. You contract and pay the operator directly, and nothing is taken from their rate. Any fee of ours is paid by the company, separately, under the Terms of Business.
The questions that are not about this seat, on contracts, notice, IR35 and how a booking works, are answered on the fractional executive FAQ.
Operator Search: five assessed operators in five business days
Can't find the right CISO, or haven't got the time to look? We run the search and put five vetted operators in front of you in five business days. Every number agreed before anything starts.
Start a search →Other seats
Hold this seat yourself rather than hiring for it? Becoming a fractional CISO covers what it earns, how many clients it holds, and when it does not work part-time.
This seat, by industry
The job changes with the sector, and these carry what actually changes rather than the same page with an industry word swapped in.
- Fractional CISO for fintech: the questionnaire is a sales problem wearing a security costume
- Every seat and industry combination