An interim CISO in the Netherlands costs roughly EUR 125 to 300 per hour, depending on experience, sector and complexity. Organisations bring one in after an incident, during a compliance programme (ISO 27001, the Dutch Cybersecurity Act or DORA), when the permanent CISO leaves, or for a strategic overhaul.
What does an interim CISO cost in 2026?
Rates for an interim CISO in the Netherlands vary widely with experience, sector and the complexity of the assignment. In 2026 we see the following ranges:
- Junior/mid-level CISO (5-10 years' experience): EUR 125 - 175 per hour
- Senior CISO (10-15 years' experience): EUR 175 - 225 per hour
- Executive CISO (15+ years, boardroom experience): EUR 225 - 300 per hour
On a day rate (8 hours) that comes to EUR 1,000 to EUR 2,400 per day. A full-time interim CISO therefore costs between EUR 20,000 and EUR 48,000 a month. Many organisations opt for a part-time arrangement of 2 to 3 days a week. That brings you to roughly EUR 8,000 to EUR 28,800 a month.
On top of that, budget for travel, any expense allowances and the tooling or licences the interim CISO needs. At MVPeople we agree these points up front.
When do you bring in an interim CISO?
These are the situations we come across most often.
1. After a security incident
After a data breach, ransomware attack or other security incident, there is an urgent need for leadership. An interim CISO can coordinate incident response straight away, handle communication with regulators and draw up a recovery plan. Through MVPeople we present the first candidate within 4 hours of your request, and an interim professional can usually be deployed within 48 to 72 hours.
2. During compliance programmes
An ISO 27001 certification, preparing for the Dutch Cybersecurity Act (the Cyberbeveiligingswet, which implements NIS2 in the Netherlands and entered into force on 15 August 2026) or implementing DORA (applicable since 17 January 2025) all call for experienced security leadership. An interim CISO brings that experience without permanent overhead. In the interview, ask about previous programmes of this type and the pitfalls the candidate ran into.
3. When the current CISO leaves
Recruiting a permanent CISO takes time, and a notice period often follows. An interim CISO bridges that gap so the security programme keeps running. In parallel, you can have a permanent CISO recruited through MVPermanent.
4. For strategic transformation
If you want to raise your cybersecurity maturity, an experienced interim CISO can set up the strategy, the governance framework and the roadmap. This works particularly well when you are building your own security function for the first time: the interim CISO lays the foundation a permanent CISO then builds on.
Interim or permanent CISO: weighing it up
An interim CISO is available quickly, flexible to deploy and looks at your organisation with fresh eyes, bringing experience from earlier assignments elsewhere. A permanent CISO builds long-term relationships and is more deeply involved in culture and day-to-day operations.
In practice we often see a combination: organisations start with an interim CISO and recruit a permanent one in parallel, after which the interim CISO hands over.
Red flags when selecting an interim CISO
Not every candidate who calls themselves a CISO is right for your organisation. Watch for these warning signs:
- No boardroom experience. A CISO has to be able to communicate with the executive board and the supervisory board. Ask for concrete experience with board-level reporting and presenting security risks in business terms.
- A purely technical profile. Governance, risk management and stakeholder management matter at least as much for a CISO. An overly technical CISO often lacks the ability to translate security into business impact.
- No relevant certifications. CISSP or CISM is common for this role; CISA suits an audit background. Knowledge of your sector, for example financial services or healthcare, is a plus.
- No references from comparable assignments. Always ask for references from previous interim CISO assignments in similar sectors or organisations of a similar size.
- Unrealistic promises. Be critical of candidates who promise your organisation will be compliant within a month. Thorough security work takes time, and a reliable CISO is honest about that.
How MVPeople Group helps
MVPeople Group has a network of 7,000+ vetted cybersecurity professionals. Under our 4-hour golden rule, you receive the first qualified CISO candidate within 4 hours of your request. Looking for a permanent CISO? Through MVPermanent we run executive search, with a 3-month guarantee period.
Read more about our CISO expertise or get in touch for a first conversation about an interim or permanent CISO.