Interim & Fractional CIO and CISO Recruitment

Q: How quickly can an interim CISO start after a cyber incident?

The most useful point is usually once the incident is contained and the organisation moves into recovery. We can start the search straight away, so the right leader is ready to step in at that stage.

Q: What should an interim CISO do first?

Establish what happened and what is still at risk, give the board a clear and honest picture, and agree priorities. After that, the focus moves to fixing the gaps the incident exposed and rebuilding confidence with customers, regulators and staff.

Q: Is a fractional CISO enough for a mid-sized business?

Often, yes. Many mid-sized businesses need senior security leadership for strategy, risk and board reporting rather than full-time day-to-day management. A fractional CISO can provide that, supported by internal staff or specialist providers.

Q: Do you also recruit permanent CIOs and CISOs?

Yes. See our CIO and IT Director recruitment page. We can run a permanent search alongside an interim assignment if needed.

Interim and Fractional CIO and CISO Executive Search

Technology and security leadership gaps are often exposed at the worst possible moment.

A cyber incident has disrupted the business. A regulator or auditor has raised concerns. A digital transformation has stalled. The CIO has left in the middle of a major programme.

In these situations, boards need an experienced technology or security leader who can take charge quickly, give the board a clear picture and lead the response.

Novo finds interim and fractional CIOs, CISOs and IT Directors for organisations that need that leadership now. This is executive search for named senior leaders who are accountable to your board. It is different from buying a managed security service.

Technology Leadership Specialist

Jon Hollier

Founding Director

Need technology or security leadership now?

Speak in confidence with one of our Directors about the situation and the leader it needs.

Call now

Email now

Bring in experienced technology and security leadership

Book a confidential discussion with one of our Executive Search Directors

Discuss a CIO or CISO Appointment

When Boards Need an Interim CIO or CISO

Common situations include:

A cyber incident has exposed a leadership gap
A regulator or auditor has raised concerns
A digital transformation has stalled

The CIO or CISO has left during a critical programme
A merger or acquisition is bringing two technology estates together
The board needs clearer reporting on technology and cyber risk

Interim technology leaders are often brought in under pressure. The right appointment brings calm judgement as well as technical depth.

Interim CISO or Virtual CISO Service: What Is the Difference?

Both can help. They are not the same thing.

A virtual CISO service is usually provided by a security consultancy as part of a wider managed service. The person may change, and their accountability sits with the provider.

An interim or fractional CISO is an individual executive appointed to your leadership team. They are accountable to your board, work inside the organisation and take ownership of security leadership for the period agreed.

Where the board needs leadership, accountability and a clear voice in the room, an executive appointment is usually the better fit.

Fractional CIOs and CISOs

Not every organisation needs a full-time technology or security executive.

Many mid-sized and investor-backed businesses need senior technology leadership for strategy, risk and board reporting, without a full-time appointment.

A fractional CIO or CISO works part time on an ongoing basis. They set direction, oversee suppliers and internal teams, and report to the board on technology and cyber risk.

Interim CISOs and AI-Driven Cyber Attacks

Attackers are using AI to find weaknesses faster and to make phishing and fraud more convincing. IBM’s 2026 Cost of a Data Breach research found that 22% of UK organisations reported experiencing AI-generated attacks, and that the average UK breach cost £3.13 million.

The risk is practical, not theoretical. In October 2026, two critical flaws in PHP, the language behind around 69% of websites whose server-side language is known, were patched as a priority. Researchers said AI had made long-standing weaknesses like these far easier to exploit, and the UK’s National Cyber Security Centre urged organisations to consider taking unpatched systems offline.

For boards, the question is whether their security leadership can keep pace. An interim CISO can assess exposure quickly, set clear priorities, test incident response against AI-enabled scenarios such as deepfake fraud, and give the board a clear view of the risk while a permanent appointment is made.

Read more in our article, Is Your Cyber Leadership Ready for AI-Driven Attacks?

Testimonials

Novo delivered exactly what we needed at a moment of real pressure. The interim operations director brought calm, clarity and genuine support to our teams. Confidence returned quickly and the airport regained its rhythm far sooner than we expected.

Interim Operations Director, International Airport

Novo introduced an interim COO who stabilised the business without slowing momentum. They aligned our teams, improved delivery discipline and restored customer trust. The organisation now operates with clarity and confidence.

Interim COO, High-Tech Software Company

Novo ran a highly professional and thorough search process, bringing forward an impressive list of candidates for our consideration

RECCo

As a result of Novo’s commitment and hard work we have acquired five very good businesses; a great team effort. We plan to embark on a third round of acquisitions next year and will have no hesitation in choosing Novo as a partner.

Clearsprings Support Services Ltd

We were delighted with Novo’s work and efforts. Theye significantly contributed to achieving our goal. We therefore would have no hesitation in recommending Novo to any other organisation looking for help or advice in executive recruitment.

Chiorino UK Ltd

Thank you very much for your involvement in identifying our new Product Development Director and managing a very smooth process. This was a significant recruitment process for our business, and I am very pleased with how it has gone from start to finish.

Animalcare

After a Cyber Incident

Once the response team has contained an incident, the board needs a leader to take ownership of recovery, rebuild confidence and fix the gaps the incident exposed.

An interim CISO or CIO can provide that leadership while the board decides on the long-term structure. Read our article on when to bring in interim security leadership after a cyber incident.

For a permanent appointment, see our CIO and IT Director recruitment page.

Our Technology Leadership Specialists

Jon Hollier

View Bio

Matthew Searle

View Bio

George Woodward

View Bio

Dale Perrett

View Bio

Facing a technology or security leadership gap?

Discuss your requirements with our executive search team in confidence

Discuss a Confidential Appointment

Insights

Interim CFO or Fractional CFO: Which Does Your Business Need?

Why PE Portfolio Companies Are Turning to Interim CFOs

After a Cyber Incident: When to Bring in Interim Security Leadership

Interim CFO or Fractional CFO: Which Does Your Business Need?

Why PE Portfolio Companies Are Turning to Interim CFOs

After a Cyber Incident: When to Bring in Interim Security Leadership

Interim CIO and CISO FAQs

How quickly can an interim CISO start after a cyber incident?

What should an interim CISO do first?

Can an interim CISO help with AI-driven cyber attacks?

Yes. An experienced interim CISO can quickly assess how exposed the organisation is, check that critical systems are patched and monitored, strengthen defences against AI-enabled phishing and impersonation, and test the incident response plan against realistic scenarios. They can also put sensible controls around the organisation’s own use of AI.

Just as importantly, they give the board clear, regular reporting on cyber risk and a named leader who is accountable for it.

Is a fractional CISO enough for a mid-sized business?

Do you also recruit permanent CIOs and CISOs?