Security advisor for small businesses and nonprofits
Security leadership for the small teams doing big work.
Most small businesses and nonprofits can't hire a full-time security leader. I become that leader for you, without the full-time cost. You get plain-language advice, a plan that fits your budget, and someone in your corner when it counts.
Sound familiar?
"Our cyber insurance renewal has questions we can't answer."
I'll help you answer honestly and close the gaps that matter to your premium.
"A big customer or funder sent us a security questionnaire."
We'll get it done, and build the policies so the next questionnaire takes an afternoon.
"Our staff are using ChatGPT, and I don't know what they're putting into it."
We'll set simple rules for which AI tools to use and what stays out of them.
"If ransomware hit Friday night, I'm not sure who I would call."
We'll write the plan together and practice it, so Friday night is just a bad night.
Three ways to work together
Fractional CISO
Ongoing security leadership without a full-time hire. Strategy, policies, vendor reviews, and reporting to your board, all sized to fit your budget.
Security assessment
Find out where you really stand, from your laptops to your cloud setup. You get a prioritized plan in plain English, not a 200-page scan report.
Compliance readiness
When an insurer, customer or funder asks for proof, I help you answer honestly and put the basics in place. Formal frameworks like SOC 2 or ISO 27001 too, if you need them.
With a security team or without one
No security staff? I'll be your security lead. Already have an internal IT team or an IT provider? I'll give them direction and backup, and keep you informed.
Advice grounded in real technical depth
I've spent 20 years in hands-on technology work, from ethical hacking to running IT and securing cloud systems. My recommendations are practical, your IT people can act on them, and I can tell when the work is done right.
How it starts
- 1 A free 30-minute conversation Tell me what's worrying you. No sales pitch, no pressure.
- 2 A clear picture We look at where you are today and what matters most for your size and mission.
- 3 Steady progress One right-sized step at a time, with me accountable for keeping it moving.
An outstanding infosec leader with deep expertise in cloud security and a calm, pragmatic approach to solving complex challenges. He balances risk and business needs with clarity and precision.
Hi, I'm Jonathan.
Cyberattacks on small businesses and nonprofits rarely make the news, but they can be devastating. There's no spare budget to help you recover, sometimes no cyber insurance to lean on, and no security team to call when it happens.
That's why I do this. Organizations doing real good in their communities deserve the same quality of security guidance as anyone, and they're usually the last to get it.
I hold a BS and an MS in Cybersecurity, and the same certifications you'd expect from the head of security at a much larger organization. You get that experience without the enterprise price tag or the jargon.
Credentials
- CISSP
- CISM
- ISO 27001 Lead Implementer
- CCSP
- OSCP
- Certified vCISO
- AWS Security Specialty
- AWS Solutions Architect Pro
- CCSK
- CCAK
Not sure where to start? That's exactly what the first call is for.
Thirty minutes, free, no obligation. You'll leave with at least one thing you can do this week.