Independent and free for buyers. We don't do audits. We help you find and compare the firms that do.

vCISO firms for government

These 10 vCISO firms say they work with government. A vCISO is a part-time security leader you hire from outside, often to run a compliance programme.

Updated 1 Oct 2026. How we research
Get 3 to 5 quotes
Firms listed (of vCISO firms)
10
Published prices
$2,500 to $60,000
2 firms, each linked to its source
Checked in an official register
2 of 10
Filters
Credentials
Price
Works with
Also offers
Region
Firm type
10 matching firms
  • BARR Advisory logo
    BARR Advisory2 verified
    Audit firm and certification body and consultantSOC 1SOC 2SOC 3ISO 27001
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • GRSee1 verified
    Consultant and audit firmSOC 2SOC 3ISO 27001ISO 42001
    Starting price
    From $15,000
    Legal entity
    Not stated
    Accreditations
    Verified
    Get a quoteProfileChecked 1 Oct 2026
  • Agency logo
    AgencyNot yet checked
    ConsultantSOC 2ISO 27001GDPRHIPAA
    Starting price
    From $2,500
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • DNX Solutions logo
    DNX SolutionsNot yet checked
    Consultant, Australia. Signs as DNX SolutionsSOC 2ISO 27001ISO 42001PCI DSS
    Starting price
    Not published
    Legal entity
    Firm states
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • DPO Consulting logo
    DPO ConsultingNot yet checked
    Consultant, FranceGDPREU AI Act
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Lazarus AllianceNot yet checked
    Audit firmSOC 1SOC 2SOC 3CMMC
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • OmniCyber Security Ltd logo
    OmniCyber Security LtdNot yet checked
    ConsultantISO 27001ISO 42001Cyber EssentialsPCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Pivot Point Security logo
    Pivot Point SecurityNot yet checked
    Consultant, United StatesISO 27001CMMCSOC 2PCI DSS
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026
  • Seiso logo
    SeisoNot yet checked
    Consultant, United StatesISO 27001SOC 2CMMCHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Firm states
    Get a quoteProfileChecked 1 Oct 2026
  • Tevora logo
    TevoraNot yet checked
    ConsultantCMMCFedRAMPHITRUSTHIPAA
    Starting price
    Not published
    Legal entity
    Not stated
    Accreditations
    Not stated
    Get a quoteProfileChecked 1 Oct 2026

How to choose a vCISO

Decide what you need first: a compliance programme, board reporting, customer security reviews or all three. Then ask for the hours per month, who actually does the work, and how to end the contract.

Monthly retainers are common. Ask what is included and what is billed on top.

Related lists
What is a vCISO?

A virtual chief information security officer is an outside expert who leads your security and compliance work part time.

When does a startup need a vCISO?

Usually when enterprise customers start sending security questionnaires and nobody on the team owns security.

How is this list ordered?

By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.