See It Be It – The Women Helping Shape Cyber Security in Scotland
International Women’s Day takes place on Sunday 8th March 2026, and this year’s theme Give to Gain couldn’t feel more relevant to our work at…
The Cyber and Fraud Centre Scotland has launched a new Virtual Chief Information Security Officer (vCISO) service, designed to provide organisations with senior-level cyber security leadership without the cost or commitment of a full-time hire.
The new service has been developed in response to growing demand from organisations seeking deeper, more strategic cyber security support as they navigate increasing regulatory pressures, customer expectations, and business volatility alongside a rapidly evolving threat landscape.
Many are investing in technical cyber security but continue to face challenges around governance, risk ownership, compliance, and long-term planning. Without dedicated security leadership, businesses can struggle with reactive approaches to cyber resilience, gaps in accountability, and increased pressure during incidents, audits, or periods of rapid expansion.
The service is designed to address those challenges by providing flexible, tailored access to experienced cyber security leadership.
With the service, organisations gain:
The vCISO service offers flexible monthly, quarterly, and annual engagement options, with pricing based on the level of support required and the organisation’s size, maturity, and complexity. Cyber and Fraud Centre Scotland is also exploring socially focused pricing models for charities, third sector organisations, and start-ups to help ensure cyber security does not become a barrier to growth or the responsible management of sensitive data.
The vCISO service has been designed to complement the Centre’s Cyber Advance programme – a year-long cyber improvement service focused on technical uplift, continuous improvement, and staff training. Both services follow a structured, phased approach, providing organisations with a cohesive combination of strategic cyber leadership and operational delivery. Together, they ensure recommendations are not only identified, but implemented effectively over time.
Jude McCorry, CEO of Cyber and Fraud Centre Scotland, said: “We developed the vCISO service in direct response to feedback from clients who need strategic direction and expert guidance, but may not require – or be able to justify – a full-time CISO or traditional retainer model. Many organisations prefer a more flexible, project-based approach with clearly defined deliverables.
“Through our vCISO service, we provide the expertise, structure and strategic oversight needed to strengthen cyber resilience in a practical and sustainable way. Our clients and members also recognise that by working with us, they are helping to support Scotland’s wider cyber resilience ecosystem, enabling us to provide low or no-cost access to organisations that may otherwise struggle to afford it.”
Willie Fairhurst, Board Member of Cyber and Fraud Centre Scotland and CEO of Fairhurst Consult, added:
“The vCiso service will be a valuable addition to both our service offering and the support available to our clients. It will be particularly beneficial for smaller organisations that need assistance navigating regulatory requirements to secure funding, or that are looking to expand into markets beyond Scotland. We’re here to help organisations build the confidence and resilience they need to grow securely.”
To support the launch, Cyber and Fraud Centre Scotland is hosting a free webinar on May 21: “vCISO Unpacked: What Virtual CISOs Really Do.” The session will provide senior leaders, decision-makers, and IT managers with a practical, behind-the-scenes look at how a vCISO service operates within real organisations.
For more information about the Cyber and Fraud Centre Scotland vCISO service, and to book a space at our upcoming webinar, visit: https://cyberfraudcentre.com/events/vciso-unpacked-may-2026