ELILJO ADVISORY

ELILJO ADVISORY Strategic Security Leadership & Advisory

Managing Uncertainty. Stay in Control. Become Anti‑Fragile.

I help you navigate uncertainty, strengthen enterprise-wide security governance and turn strategic priorities into effective action.

Let’s Explore What Matters Most Explore Our Approach

Security leadership. Governance. Resilience. Confidence.

01 The challenge

Security requires more than technology. It requires leadership.

Organisations face an increasingly complex environment of evolving threats, regulatory expectations, technological developments and business transformation.

Understanding the risks is only the starting point. You also need clear priorities, accountable leadership and the ability to turn decisions into action.

I provide independent senior security leadership and strategic advice to help you navigate this complexity.

  • Uncertainty

    Understanding changing risks, dependencies and business exposure.

  • Control

    Establishing governance, accountability and informed decision-making.

  • Resilience

    Preparing your organisation to respond, adapt and improve.

02 Our philosophy & approach

From uncertainty to control. From resilience to anti‑fragility.

Three connected steps, not three slogans. Understanding creates the basis for direction; direction and action create the basis for an organisation that adapts and becomes stronger.

  1. Understanding

    Managing Uncertainty

    Understand the environment, identify what matters and turn complex risk information into meaningful insight.

  2. Direction & action

    Stay in Control

    Establish clear priorities, ownership and governance, and translate decisions into effective action.

  3. Adaptation & strength

    Become Anti‑Fragile

    Strengthen resilience, learn from disruption and build the ability to adapt and improve.

03 Services

Enterprise-wide security. Strategic clarity. Practical execution.

I support you across four complementary areas, connecting security leadership, governance and business priorities with practical execution.

01 Managing Uncertainty

Cyber Risk Governance & Board Reporting

Translating technical risks into clear priorities, informed management decisions and executive-level boardroom insight.

The challenge. Boards and executives are accountable for cyber risk, yet often receive technical information that is hard to weigh against other business and enterprise risks.

Areas of support
  • Cyber risk governance and oversight
  • Executive and board-level reporting
  • Translation of technical findings into business impact
  • Risk prioritisation and management insight
  • Security accountability and decision-making
  • Alignment between risk appetite, business priorities and security measures

OutcomeBetter-informed leadership decisions, clearer accountability and improved oversight of cyber risk.

02 Stay in Control

Security Strategy & Actionable Roadmaps

Aligning security directly with business objectives, translating strategic direction into prioritised initiatives and measurable execution.

The challenge. Without a clear direction connected to business objectives, security investment becomes reactive and initiatives compete rather than build on each other.

Areas of support
  • Enterprise-wide security strategy
  • Alignment with business objectives
  • Security maturity and capability assessments
  • Prioritisation of initiatives and investments
  • Security transformation and programme direction
  • Actionable roadmaps and progress monitoring

OutcomeA clear strategic direction, practical priorities and a roadmap connecting ambition with execution.

03 Stay in Control

Compliance Frameworks & Audit Readiness

Navigating regulatory requirements and establishing practical compliance with frameworks such as ISO/IEC 27001 and NIS2.

The challenge. Regulatory and assurance expectations keep increasing. The task is to turn them into workable governance, processes and controls, rather than paperwork that sits apart from the business.

Areas of support
  • Regulatory and compliance gap assessments
  • ISO/IEC 27001 implementation and certification readiness
  • NIS2 readiness and governance
  • Security policies, controls and accountability
  • Internal audit preparation
  • Remediation planning and compliance coordination

OutcomeA structured and practical approach to compliance, audit readiness and demonstrable security governance.

04 Become Anti-Fragile

Security Resilience & Crisis Management

Strengthening organisational resilience, preparing leadership teams for disruption and fostering a proactive security culture.

The challenge. Not every disruption can be prevented. What matters is how well leadership is prepared to respond, coordinate and learn from it.

Areas of support
  • Security resilience strategy and governance
  • Crisis management preparedness
  • Incident response leadership and coordination
  • Executive and stakeholder preparedness
  • Lessons learned and continuous improvement
  • Security awareness and organisational culture

OutcomeBetter preparedness, stronger response capabilities and an organisation able to adapt and improve when confronted with disruption.

04 Engagement models

The right level of leadership for your situation.

Your situation determines the right level of involvement: ongoing senior leadership, hands-on interim responsibility or independent executive advice. Each model can be applied to one or more of the four service areas.

Ongoing

Fractional CISO Services

Ongoing senior security leadership tailored to your organisation's needs, without the overhead of a full-time executive.

Nature
Recurring senior leadership over an agreed period
Best when
You need sustained senior direction but not, or not yet, a full-time CISO
  • Guidance on security strategy and priorities
  • Oversight of governance, risk and compliance
  • Executive stakeholder engagement and reporting
  • Direction to internal teams and external providers
  • Continuity and follow-through

Senior security leadership when you need it, with the flexibility your organisation requires.

Defined mandate

Interim Security Leadership

Hands-on executive leadership during periods of transition, organisational change or security transformation.

Nature
Hands-on leadership for a defined period or mandate
Best when
You need an experienced leader to step in, take responsibility and deliver during change
  • Leadership continuity during vacancies or transitions
  • Direction and coordination of teams and stakeholders
  • Leadership of security transformation initiatives
  • Stabilisation of governance and operating practices
  • Execution against agreed mandate and priorities

Experienced leadership to take charge, provide direction and deliver during periods of change.

Independent perspective

Executive Security Advisory

Independent strategic support to assess risks, strengthen governance and optimise security priorities and investments.

Nature
Independent strategic advice and challenge, without an operational role
Best when
Executives, boards or management teams want an independent view before important decisions
  • Independent security and risk assessments
  • Executive and board-level advice
  • Strategic reviews and recommendations
  • Governance and operating model advice
  • Review of security priorities and investments

Independent senior insight to support better-informed security decisions.

Working with a consulting or interim-management firm? I also contribute senior security expertise to your client assignments, under any of these three models.

Not sure which model fits? That is a good first conversation.

Discuss the Right Engagement

05 Experience

Experience that connects strategy, leadership and execution.

25+ years of international, cross-sector experience in enterprise security leadership
  • High-tech semiconductor & manufacturing
  • Banking & financial services
  • Telecommunications

My approach grew out of more than 25 years of security leadership in semiconductor and manufacturing, banking and financial services, and telecommunications. Different industries taught the same lesson: organisations cope best when they understand what matters, stay in control of their priorities and learn from disruption.

In every sector, the decisive step is the same: turning strategy into a roadmap people can actually execute. That is where I bring together executive leadership, strategic insight and technical understanding.

What that looks like in practice

  • Governance & board reporting

    Setting up and leading corporate security offices and their governance models, and building alignment with C-level stakeholders on security priorities and transformation.

  • Strategy & roadmaps

    Writing enterprise-wide security strategies and translating them into actionable roadmaps, such as the “Managing Uncertainty” strategy, aligned with NIST CSF and structured around 130 fit-for-purpose activities.

  • Compliance & audit readiness

    Leading strategies, internal audits and execution roadmaps for regulatory and certification readiness, including the first ISO/IEC 27001 certification of a listed multinational, covering its headquarters and main manufacturing site, achieved within 12 months. Enterprise security architecture and roadmaps for regulated financial-sector environments.

  • Resilience & crisis management

    Leading incident detection and response mechanisms, including NIS2-compliant set-ups.

Experience gained in senior roles before founding ELILJO ADVISORY. Employer and client names are not disclosed.

06 Working together

Independent perspective. Pragmatic collaboration. Tangible progress.

I work closely with you and your executive colleagues to understand your context, establish priorities and support effective execution, alongside your existing teams and partners.

  1. 1

    Understand your business and its context.

  2. 2

    Assess uncertainty, risks and priorities.

  3. 3

    Establish direction, ownership and governance.

  4. 4

    Translate strategy into actionable plans.

  5. 5

    Support execution, learning and continuous improvement.

  • Independent

    Objective advice. No technology to sell.

  • Pragmatic

    Recommendations that fit your context and capacity.

  • Proportionate

    Solutions sized to the actual risk, not to a generic framework.

  • Executive-level

    Clear communication with boards and leadership teams.

  • Collaborative

    Working with your existing teams and partners.

  • Sustainable

    A focus on lasting progress over short-term activity.

07 Contact

A confidential first conversation.

Whether you are strengthening enterprise-wide security governance, developing a security strategy, preparing for regulatory requirements or looking for experienced security leadership, I welcome a confidential initial discussion.

Location
Belgium, working internationally

Your details are used only to respond to your enquiry. See the privacy notice.