An experienced CISO to lead your security program, support enterprise sales and guide audit readiness, on a fractional basis.
Program
Security strategy and governance
Cloud
Cloud and product security
Artificial intelligence
Adoption, risk and oversight
Assurance
Audit, compliance and privacy
Their security review runs to sixty questions and ends on a call with their CISO. You need someone who can hold that conversation and run the program behind the answers.
A date is already sitting in a contract. Getting from there to a clean report takes the right scope, the right sequence, and someone who knows what the auditor will test.
Your team is shipping AI features and adopting AI tools faster than anyone is governing them. Customers have started asking who owns that.
Each region sets its own privacy law and its own data residency rules. GDPR, Law 25 and their equivalents are not interchangeable, and the differences show up in your architecture as much as your contracts.
I lead the program, work directly with your team, and stay accountable for the outcome.

Gennady Soloviev
Founder and principal consultant
CISSP · ISO 27001 LI · ISO 42001 LA
Fifteen years leading security across North America, Europe, the Middle East, and Asia-Pacific. That work has ranged from startups building their first security program to organizations answering to regulators and auditors.
I work with your leadership and teams to set priorities, make informed decisions, and turn them into action. You get a clear direction, practical guidance, and someone accountable for seeing the work through.
Set the security direction, establish ownership, and turn business risks into priorities. Build a program your team can run and your leadership can make informed decisions about.
Embed security into how you build, ship, and operate. Guide cloud, identity, and architecture decisions, and help engineering teams make security part of everyday delivery.
Establish how AI is adopted, assessed, and governed across your business. Define accountability, evaluate models and vendors, and put safeguards in place as your use of AI evolves.
Translate customer commitments and regulatory obligations into a practical plan. Lead the preparation for audits and assessments, and help your team address privacy requirements as you enter new markets.
Ongoing · monthly
I take the security leadership role in your business, with a regular working cadence and direct involvement with your leadership, teams, customers, and board.
Security strategy, program leadership, and roadmap
Customer and investor due diligence
Board and audit-committee reporting
Defined scope · agreed milestones
I lead a focused engagement to prepare your business for an audit, certification, or compliance requirement. We establish the scope, close gaps, and build the evidence, with support through the audit where applicable.
SOC 2 Type I or II readiness
ISO 27001 or ISO 42001 certification readiness
PCI DSS assessment readiness
Privacy and regulatory readiness, including GDPR, Law 25, and HIPAA
Focused scope · as needed
I help you work through a specific decision or challenge, bringing an independent security perspective and clear recommendations your team can act on.
Cloud and product architecture review
Customer and investor due-diligence support
AI risk and governance assessment
unblocked
In client contract value where security was a gate to closing.
startups
Startups supported, from first customer to enterprise scale.
audits
Compliance preparations and formal audits led and supported since 2021.
Individual engagements, with the situation, the work and the outcome.
Read the case studiesWe start with where your business is going and what security has to support.
You leave with a view on priorities, scope and a practical next step.
If another specialist is the better fit, I'll say so and tell you who.