Interim security director / information security manager
Interim security director support for day-to-day delivery
Give your security team a defined management role during a vacancy, transformation project, or period of heavy demand. Discuss temporary or fractional support with Infinity Cyber Advisors (ICA) to coordinate people, vendors, and program work within agreed responsibilities.
MIS
CISSP
CHISL
CPHIMS
CDH-E
Will Long Sr. · Founder
MIS · CHISL · CDH-E · CISSP · CPHIMS
Nearly 40 years in IT & cybersecurity
Former VP & CISO, Children’s Health System of Texas
Tim Pelikan · Co-Founder
Credential details pending confirmation
30 years in cybersecurity & data risk
Interviews & industry conversations
Coffee With Closers
Cybersecurity With Discern
“ICA provides distinctive security professionals who excel at building strong client relationships, demonstrate exceptional organization, and deliver practical, risk-based consulting recommendations to our clients.”
Michael Cox, CIPP/US
Chief Privacy Consultant & Founder, SoCal Privacy Consultants
Partner endorsement of ICA’s advisory work
Keep daily work moving through a management gap
A security manager’s departure can leave capable people without clear direction. Project priorities compete with operational commitments. Vendors need follow-up, and the CISO becomes the default owner of decisions that previously sat with a director or manager.
Interim management gives those responsibilities a defined owner for the agreed assignment. The focus is practical execution: setting team priorities, tracking unresolved issues, and keeping the sponsoring leader informed.
Management support built around your team
Coordinate the day-to-day workload
Translate agreed security priorities into a work plan with owners and review points. Coordinate assignments with team members and identify where competing demands require a management decision.
Maintain vendor accountability
Follow up on agreed vendor tasks and dependencies. Bring unclear responsibilities or stalled commitments to the appropriate owner within the assignment’s authority.
Connect projects to operational priorities
Coordinate security projects alongside ongoing program work. Track dependencies on IT and business teams so the sponsor can see where delivery needs a decision or additional capacity. Technical implementation remains assigned to the agreed delivery resources.
Make issues visible to management
Maintain an issue tracker and report progress against the work plan. Explain blocked work and decisions requiring escalation. Management reporting should help the CIO or CISO act on exceptions rather than reconstruct status from separate conversations.
Leave a usable record of work and decisions
Typical agreed outputs include a work plan, team-coordination records, an issue tracker, and management reporting. The work plan identifies priorities and accountable owners. Coordination records capture assignments and follow-up. The issue tracker documents blockers, ownership, and next actions.
Reporting brings those records together for the sponsoring leader. Agree the format and cadence around your existing management process. At an assignment’s close, current work and unresolved issues should be clear enough for the continuing manager to pick up.
Define the management remit before the assignment starts
Begin with the gap you need covered: an open position, added project demands, or an overloaded leader. Identify the sponsor, reporting line, team size, and existing vendor relationships. Clarify which activities need direct management and which remain with other owners.
The working agreement defines responsibilities, decision authority, tools, onsite needs, hours, and availability. ICA must confirm practitioner fit and capacity before an assignment or start date is agreed. Establish initial priorities from the available work records, then set a cadence for reviewing progress and changes in workload.
A working partnership with your existing leadership
This service fits CIOs, CISOs, and IT directors who need management capacity beneath or alongside their existing leadership structure. HR and procurement teams can help define the role requirements and engagement terms.
Your organization provides the sponsor, relevant access, team participation, and approval paths. The assigned practitioner manages work within the agreed remit and escalates decisions beyond it. Business risk acceptance and authority reserved to your leadership remain with your organization.
Clear boundaries for role coverage
The assignment covers an agreed management role. It does not automatically provide a full managed security service, continuous monitoring, or incident-response coverage. Technical delivery and specialist tool operation require separate scope and confirmed resources. A standalone security assessment is a distinct engagement with its own defined outputs. Coverage follows the working agreement rather than an assumption of full-time availability.
FAQ
Questions about interim security management
How does this differ from an interim CISO?
This role centers on daily team, vendor, and program execution. An interim CISO addresses executive leadership coverage. The reporting line and delegated decisions determine which role fits your gap; the title alone does not define authority.
Can the assignment be fractional?
The catalog supports temporary or fractional assignments. Agree hours and availability against the management workload. A fractional arrangement needs clear ownership for work and decisions outside the practitioner’s agreed coverage.
Can you work with our current team and providers?
That is part of the scoped management role. Define team responsibilities and provider commitments before work begins. The practitioner coordinates and follows up within the agreed remit; existing vendor contracts still govern the services those providers deliver.
Will the manager configure our security tools?
Management coverage does not automatically include configuration or hands-on tool operation. Identify your tools during scoping so ICA can confirm the role’s requirements. Any technical work needs explicitly agreed responsibilities and verified practitioner capability.
Can an assignment begin immediately?
A start date depends on confirmed capacity, practitioner fit, and the agreed scope. Discuss your timing requirements during scoping. An inquiry does not establish immediate placement or reserve a specific leader.
How do we prepare for the permanent manager’s return or arrival?
Include transition needs in the assignment plan. Agree which work records and open issues the continuing manager will need. A defined end-of-assignment review helps preserve context about priorities, outstanding decisions, and follow-up responsibilities.
Give daily security delivery a clear management owner
Define the team responsibilities that need coverage and the work that needs closer coordination. Discuss an interim management role shaped around your reporting structure, priorities, and agreed authority.