Fractional CISO: Strategic Governance & Risk Leader

Sphere Digital Recruitment; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Sphere Digital Recruitment is seeking a Fractional CISO to provide strategic security leadership from London, guiding governance, policy, and risk management as the business scales internationally across Europe.

You will review security policies, define requirements for products and systems, support accreditation programmes (ISO and related standards), and advise senior stakeholders on information security best practices while avoiding hands-on engineering.

Qualifications

• Prior CISO, Head of Information Security, or senior security leadership experience.
• Strong background in security policy, governance, risk and compliance.
• Experience supporting security accreditations and certification programmes.
• Exposure to international regulatory and compliance requirements.
• Familiarity with martech, adtech, measurement, or similar technology environments.
• Strategic thinker with ability to influence stakeholders in a fractional/consultancy capacity.

Responsibilities

• Review, assess, and develop security policies and governance frameworks.
• Provide strategic guidance to senior stakeholders on information security.
• Define security requirements and advise on new products, systems, and business initiatives.
• Support security accreditation efforts including ISO certifications and related compliance programmes.
• Manage governance, risk, and compliance activities; act as an advisor on information security best practice.
• Work with internal teams to enable implementation of security recommendations while maintaining compliance.

Job description

Sphere Digital Recruitment is seeking a Fractional CISO to provide strategic security leadership from London, guiding governance, policy, and risk management as the business scales internationally across Europe.

You will review security policies, define requirements for products and systems, support accreditation programmes (ISO and related standards), and advise senior stakeholders on information security best practices while avoiding hands-on engineering.