Executive security leadership.

At the scale you need.

An experienced CISO to lead your security program, support enterprise sales and guide audit readiness, on a fractional basis.

Program

Security strategy and governance

Cloud

Cloud and product security

Artificial intelligence

Adoption, risk and oversight

Assurance

Audit, compliance and privacy

When to bring me in

Your business is growing. Security needs to grow with it.

You're moving into larger accounts.

Their security review runs to sixty questions and ends on a call with their CISO. You need someone who can hold that conversation and run the program behind the answers.

You're preparing for SOC 2 or ISO 27001.

A date is already sitting in a contract. Getting from there to a clean report takes the right scope, the right sequence, and someone who knows what the auditor will test.

AI is becoming part of your business.

Your team is shipping AI features and adopting AI tools faster than anyone is governing them. Customers have started asking who owns that.

You're expanding into new markets.

Each region sets its own privacy law and its own data residency rules. GDPR, Law 25 and their equivalents are not interchangeable, and the differences show up in your architecture as much as your contracts.

Who you're hiring

I lead the program, work directly with your team, and stay accountable for the outcome.

Gennady Soloviev

Gennady Soloviev

Founder and principal consultant

CISSP · ISO 27001 LI · ISO 42001 LA

Fifteen years leading security across North America, Europe, the Middle East, and Asia-Pacific. That work has ranged from startups building their first security program to organizations answering to regulators and auditors.

I work with your leadership and teams to set priorities, make informed decisions, and turn them into action. You get a clear direction, practical guidance, and someone accountable for seeing the work through.

What I lead

Security program and governance

Set the security direction, establish ownership, and turn business risks into priorities. Build a program your team can run and your leadership can make informed decisions about.

Security strategy · Risk management · Policy and oversight · Board and investor reporting

Cloud and product security

Embed security into how you build, ship, and operate. Guide cloud, identity, and architecture decisions, and help engineering teams make security part of everyday delivery.

AWS · Azure · GCP · Data residency · Secure SDLC · Architecture review

AI security and governance

Establish how AI is adopted, assessed, and governed across your business. Define accountability, evaluate models and vendors, and put safeguards in place as your use of AI evolves.

ISO 42001 · NIST AI RMF · AI risk assessment · Model and vendor review

Audit, compliance and privacy readiness

Translate customer commitments and regulatory obligations into a practical plan. Lead the preparation for audits and assessments, and help your team address privacy requirements as you enter new markets.

SOC 2 · ISO 27001 · PCI DSS · CSA STAR · NIST CSF · HIPAA · GDPR · Québec Law 25

How engagements work
Evidence

$100M+

unblocked

In client contract value where security was a gate to closing.

31+

startups

Startups supported, from first customer to enterprise scale.

50+

audits

Compliance preparations and formal audits led and supported since 2021.

Thirty minutes. Let's talk about what's next.
‍

We start with where your business is going and what security has to support.

You leave with a view on priorities, scope and a practical next step.

If another specialist is the better fit, I'll say so and tell you who.

Québec, Canada