Annansec Group
Grow fast without outgrowing your security with Board-level security leadership, without the full-time hire.
Cybersecurity · London, United Kingdom · 1-10 employees
Annansec Group provides virtual and fractional Chief Information Security Officer (vCISO) services to organisations that need executive-level security leadership without the cost or commitment of a full-time hire.
We embed experienced security leaders into your business to own what most organisations struggle to resource: setting security direction, managing risk, and giving your board and clients confidence that cyber is under control. Engagements deliver risk clarity, commercial unblocking (certifications, questionnaires and due diligence), accountable ownership at board level, and avoided retrofit costs.
Our particular focus: the gap between the IT decisions a growing business makes early (identity, device and access provisioning, supplier arrangements, logging) and the assurance obligations it is later held to. These decisions are usually made before anyone owns security, and they quietly determine the cost of a first certification and the duration of a first enterprise review. Annansec is the translation layer between the two.
This rests on a credential set few competitors can match: former Head of Security Architecture and Design at a FTSE250-listed insurer, PCI QSA and Internal Qualified Assessor, ISO 27001 Lead Auditor, CISSP and CDPSE, plus a greenfield GRC and security operations build at consumer scale.
Engagements follow a simple arc: Assess, Prioritise, Lead, Assure, whether delivered as a fixed-fee review, a certification programme or an ongoing retainer.
Specialties: Virtual CISO (vCISO), Fractional CISO, Security Strategy & Roadmaps, Governance Risk & Compliance (GRC), ISO 27001, SOC 2, Cyber Essentials, Risk Management, Certification & Audit Readiness, Third-Party & Supply Chain Risk, Incident Response Planning, Board & Executive Advisory, Security Programme Maturity, Vendor Security Oversight