Fractional IT Governance & NIS2 Advisor

Overview

We are seeking an experienced IT Governance and Operational Resilience Consultant to support the development of a mature internal IT governance framework within a large enterprise environment.

The organisation is currently transitioning elements of its IT service delivery model between managed service providers and is strengthening its internal IT operating model ahead of the completion of the transition programme.

This is a fractional advisory role focused on governance, operating model design, service ownership, vendor oversight and NIS2 alignment.

The successful consultant will help define the structures, processes and controls required to support a modern, well-governed IT function.

Key Responsibilities

IT Governance

• Assess current governance maturity and identify gaps.
• Design and implement governance frameworks appropriate for an internal IT function.
• Establish governance forums and operating structures, including:
  • Architecture Review Board
  • Change Advisory Board (CAB)
  • Service Review Forums
  • Risk & Compliance Reviews
• Define governance reporting, decision-making and escalation frameworks.

Operating Model Development

• Support the development of the future-state IT operating model.
• Help define service ownership, technical ownership and accountability models.
• Develop RACI structures and governance responsibilities.
• Support internal capability development as service delivery transitions to external providers.

Vendor & Service Governance

• Establish frameworks for supplier oversight and performance management.
• Define governance processes for MSP engagement and service review.
• Support service catalogue, KPI and reporting framework development.

NIS2 & Operational Resilience

• Support NIS2 readiness and governance alignment activities.
• Review risk management, resilience and control frameworks.
• Assist with policies, standards and governance controls required to support regulatory compliance.
• Provide guidance around operational resilience, third-party governance and risk management.

Roadmap Development

• Produce a practical roadmap identifying the governance, operating model and control improvements required before March 2027.
• Prioritise initiatives based on risk, complexity and business value.

Experience Required

• Significant experience in IT Governance, IT Strategy or Operational Resilience.
• Experience establishing governance structures within enterprise IT environments.
• Experience working with managed service providers and outsourced IT delivery models.
• Strong understanding of service governance, risk management and organisational operating models.
• Experience supporting regulatory or governance frameworks such as:
  • NIS2
  • ISO27001
  • NIST
  • COBIT
  • DORA
  • ITIL

Ideal Background

• Former CIO, Head of IT, CISO or IT Governance Lead.
• IT Strategy or Governance Consultant.
• Operational Resilience or Risk Consultant.
• Experience in large enterprise or regulated environments.

Engagement

• Fractional Advisory Role
• 1-2 days per week initially
• Immediate start preferred
• Expected duration through March 2027 with potential extension

Deliverables

• Governance maturity assessment
• Future-state IT governance framework
• Architecture and Change governance structures
• Service ownership model
• Vendor governance framework
• NIS2 readiness roadmap
• IT governance implementation plan