10 cybersecurity consultants

Five of these cybersecurity consultants founded their own advisory firms, three hold vCISO or fractional CISO titles, and the group splits evenly between people based in the US and in Guernsey, Portugal, Germany, India and Belgium. Useful for a company sizing up its security risk for the first time, choosing between a virtual CISO and a full-time hire, or getting ready for an audit such as CMMC or ISO 27001.

10 professionals10 companiesData retrieved September 29, 2026

Professionals to explore

  1. Antonio Relvas

    LinkedIn

    Experience: INDEPENDENT Strategic Cybersecurity & Resilience Consultant · Independent / Self Employed

    Antonio Relvas, based in Portugal, has been an INDEPENDENT Strategic Cybersecurity & Resilience Consultant since 2024, providing executive-level advisory services on enterprise security, risk management and organizational resilience. Director Cybersecurity Strategy at ZTE Corporation (2020–2023) came just before. Relvas also held the title Independent Consultant Advisory in Resilience Cybersecurity Security (2016–2019). The call for resilience and security strategy questions.

    Is this you? Claim your profile and get paid for calls.

  2. James Faxon

    LinkedIn

    Experience: Founder & Principal Advisor · Risk & Insight Group

    James Faxon has been Founder & Principal Advisor at Risk & Insight Group since 2024, an independent cybersecurity advisory practice that partners with executive teams and boards to turn technical risk into business decisions. Managing Director (BISO) at H-E-B (2023–2024) came just before, and Head of Cyber Operations at Marathon Petroleum Corporation (2020–2021) earlier. A fit for translating security risk into board decisions.

    Is this you? Claim your profile and get paid for calls.

  3. Javier Gonzalez

    LinkedIn

    Experience: Founder CEO Managing Partner Field CISO Fractional CISO Executive Cybersecurity Advisor · Verily Technology Advisors

    For more than 25 years, Javier Gonzalez has helped organizations strengthen cybersecurity, manage enterprise risk and align security strategies with business objectives, and has held the Founder CEO Managing Partner Field CISO Fractional CISO Executive Cybersecurity Advisor title at Verily Technology Advisors since 2009. Engagements there include Virtual Chief Information Security Officer (vCISO) - Government Of Puerto Rico (PRITS) (2024) and Fractional Chief Information Security Officer - Five Star Bank (2023).

    Is this you? Claim your profile and get paid for calls.

  4. Kurt Liessens

    LinkedIn

    Experience: Owner · Freelance ICT Security Consultant

    Kurt Liessens is the Owner of Freelance ICT Security Consultant (since 2006) and has also worked as a Freelance Cyber Security Security ICT Consultant since 2013 and a freelance Security Risk Officer since 2022. Liessens describes a freelance consultant who loves real ICT challenges, quality and increasing security maturity, and names ISO 27001 security audits, GDPR audits and incident response among the roles of interest. A fit for hands-on audit and maturity work.

    Is this you? Claim your profile and get paid for calls.

  5. Nalan Erol

    LinkedIn

    Experience: Partner - Cyber Security Expert · Tulos Consulting GmbH

    With a foundation in the BIG 4 and over 15 years of independent consulting, Nalan Erol helps organizations transform Information Security from a compliance burden into a resilient business enabler. Partner - Cyber Security Expert at Tulos Consulting GmbH since 2026 and a Self Employed Management Consultant since 2011; also Information Security & Risk Management Consulting for Financial Services (2022–2024). Suited to questions on meeting regulation without stalling the business.

    Is this you? Claim your profile and get paid for calls.

  6. Nicholas G.

    LinkedIn

    Experience: Founder & Principal vCISO & Cybersecurity Advisor · Secure Minds Cyber

    Nicholas G. founded Secure Minds Cyber in 2024 as Founder & Principal vCISO & Cybersecurity Advisor, an independent practice focused on AI security and agentic GRC. In-house roles include Head of Security and IT at Strava (2025–2026), Head of Security Strategy and Operations at Roblox (2024–2025) and Manager of Security Governance, Risk, and Compliance at Meta (2021–2022). A fit for companies securing AI systems.

    Is this you? Claim your profile and get paid for calls.

  7. Sam Aiello, Ph.D.

    LinkedIn

    Experience: Founder & Principal vCISO Security Architect · Vickery Cybersecurity Consulting

    Sam Aiello, Ph.D. helps CISOs, boards and strategic partners turn Zero Trust, SASE and AI security into operating models that survive audits and attackers, as Founder & Principal vCISO Security Architect at Vickery Cybersecurity Consulting since 2024. Verizon Business roles include Principal Security Solution Architect (2023–2024 and 2017–2021) and Principal Network Solution Architect (2021–2023). Sam Aiello also lists CMMC audit readiness, which suits questions on getting ready for a CMMC audit.

    Is this you? Claim your profile and get paid for calls.

  8. Tony Cleal CISSP, SSCP, CISA, CISM, GCIH

    LinkedIn

    Experience: CEO CISO Founder Cyber Security Advisor - Threat Intel, Natl Security, Resilience & Strategy · Black Arrow Cyber Consulting Limited

    Founder of Black Arrow Cyber Consulting Limited in 2018, with the title CEO CISO Founder Cyber Security Advisor - Threat Intel, Natl Security, Resilience & Strategy, Tony Cleal supports senior leadership and private clients on information security, drawing on a career in National Security and British Intelligence. Also Founder and Director at WeldSecure Limited since 2023 and Cyber & Information Security Technical Specialist (Assistant Director) (Contract) at the Guernsey Financial Services Commission (GFSC) (2018–2019). Suited to threat intelligence questions.

    Is this you? Claim your profile and get paid for calls.

  9. Trisha Wilbrand

    LinkedIn

    Experience: Former Senior Cybersecurity Consultant · REDW Advisors & CPAs

    Trisha Wilbrand describes over twenty years specializing in security strategy, governance, risk and compliance (GRC) for complex and highly regulated environments. Senior Cybersecurity Consultant at REDW Advisors & CPAs (2024–2026) and Senior Consultant Cybersecurity Strategy and Design at PricewaterhouseCoopers Advisory, Capital Projects & Infrastructure (2020–2022); self-employed Cybersecurity Leader since 2026. The fit for compliance-heavy settings such as healthcare and financial services, two of the environments Trisha Wilbrand names.

    Is this you? Claim your profile and get paid for calls.

  10. Venkatasubramanian Ramakrishnan

    LinkedIn

    Experience: Cyber Risk Consultant I Advisor Mentor Speaker · Freelance

    Venkatasubramanian Ramakrishnan has worked as a freelance Cyber Risk Consultant I Advisor Mentor Speaker since 2025, after Head - Global Cyber Security Consulting at L&T Technology Services (2023–2025). Also Head - Cyber Security Practice at L&T Smart World (2018–2023) and Head - Global Cyber Risk Management at Cognizant (2002–2018), and has built, led and advised cybersecurity practices across defence, government, critical infrastructure and enterprise sectors.

    Is this you? Claim your profile and get paid for calls.

Choose the right perspective

If you need someone to act as your security leader for a period, the vCISO and fractional CISO titles point to Javier Gonzalez, Nicholas G. and Sam Aiello, Ph.D. For governance, risk and compliance in regulated settings, Trisha Wilbrand and Nalan Erol are the closest fits, and James Faxon or Antonio Relvas suit board-level risk framing. Venkatasubramanian Ramakrishnan, Tony Cleal and Kurt Liessens bring consulting-practice leadership, intelligence and hands-on audit backgrounds respectively.

Questions to take into the conversation

  1. 01What should a cybersecurity consultant review in the first month to tell a company where its biggest risks are?
  2. 02When does a virtual or fractional CISO arrangement stop being enough, and what signals it is time to hire full-time?
  3. 03How should a company prepare for a framework audit such as ISO 27001 or CMMC without stalling its engineering work?

About this directory

This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.

Other perspectives in Security and compliance