Big-company security leadership, in small-business language
For as long as cybersecurity has existed, large enterprises have had seasoned security leaders and everyone else has been left to figure it out alone. Fractional CISO Advisory exists to close that gap.
Security executive, operator, and founder
I’ve worked in technology for three decades and lived in cybersecurity for the last twenty. I’ve been the CIO and CISO for growth companies, served on the enterprise architecture team at a Fortune 500 energy company, and led security programs with budgets of $10M and teams of 50+.
Before that, I founded a managed-services company from nothing, grew it into a multimillion-dollar business with clients across the U.S., Europe, South America, and Southeast Asia, and sold it in 2013. So I’ve been the IT provider, and I’ve been the executive who signs the checks. I know where each one’s job ends.
Over the last several years I’ve served as a fractional CISO and CIO for a portfolio of more than 100 clients in healthcare, oil & gas, manufacturing, logistics, and SaaS. I’ve guided six of them to first-time SOC 2, ISO 27001, or HIPAA certification and cut audit findings by 96%.
Fractional CISO Advisory is a veteran-owned business. I served in the U.S. Air Force with the Texas Air National Guard, and the habits that stuck with me there shape how I work with clients: plan for the bad day before it comes, rehearse it, and take ownership of the mission.
I also teach IT and cybersecurity at Houston City College (this semester, OT/ICS security) because explaining complex security in plain language is the job, whether the audience is students or a board of directors.
What you can expect
- You work with me. Not a junior analyst reading from a template.
- Plain English. If I can’t explain a risk in business terms, it isn’t ready for your leadership team.
- Budget-aware advice. Every recommendation comes with a “why now” and a cost range.
- No vendor agenda. I take no commissions on anything I recommend.
Where the experience comes from
CIO & CISO roles
Built and led security, compliance, and IT/OT programs for growth companies, including a $10M budget and a 50+ person team, and founding-executive roles at venture-backed startups.
Enterprise IT strategy
Enterprise Architecture at Occidental Petroleum, shaping 1-, 3-, and 5-year IT/OT roadmaps and a cloud strategy projecting ~$15M in savings.
Fractional leadership
Fractional CISO/CIO for a 100+ client portfolio across healthcare, energy, manufacturing, logistics, and SaaS.
Let’s see if we’re a fit.
Thirty minutes. If I’m not the right person for what you need, I’ll tell you who is.