Hi,
I am certain that I can help you secure your environment, define standards and policies for risk, audit compliance and help you to spread risk awareness to your staff and clients.
I have worked as an advisory consultant for a long time, serving in roles identical to what you describe.
Two things . . .
1. the role is known as a virtual CISO.
2. initially, you are best served with an agreement where you pay for services delivered in units of time, like hourly, daily, weekly, and so on, or work from a pool, like X hours monthly.
The role will need more scope developed after some discovery.
My website is at http://safeview.com. Open to talk in late afternoon or evenings EST. We can shape your requirements further.
Regards,
Ernie