The Core vs Shell Approach
The most effective cybersecurity teams work with a hybrid model: a permanent core of strategic roles supplemented by a flexible shell of specialists. But where does the line fall? And what does it really cost?
Permanent Core: Which Roles?
CISO, Security Manager, SOC Team Lead, and your primary GRC capacity should be permanent. These roles require organisational knowledge, relationship building and continuity that is difficult to achieve with freelancers.
Flexible Shell: When Interim?
Project-based work (pentesting, cloud security migration), peak load (NIS2 implementation, audit prep), and specialist expertise you don't need full-time (OT security, forensics) are ideal for interim deployment.
TCO Comparison
A permanent security professional at EUR 90,000 gross costs the employer approximately EUR 127,000 per year (incl. benefits, employer costs, facilities). A freelancer at EUR 800/day costs approximately EUR 177,000 per year. However: a failed permanent hire costs on average EUR 50,000-80,000 in recruitment, onboarding and departure costs.
When Is Interim More Cost-Effective?
For assignments shorter than 12 months, for urgent needs (time-to-value), and for projects where the scope is clear and the end date is fixed.
The MVPeople Advice
We help organisations determine the optimal team composition. Through MVPeople (interim), MVProfessionals (secondment) and MVPermanent (permanent) we offer all modalities from a single partner.