Security Leadership Seat

Capacity held each month. Confirmed by Alex, not inferred from an open calendar.

Reserved each month

4 days per month

Also included

weekly risk review

And

monthly executive reporting

Response time

Two business days within allocated time

Next start

February 2027

The company

Northgate Health. 240 staff, patient-facing software.

What they want

A security function, and a board that knows what it is carrying

Why now

Patient data, no security leader, no risk register and no incident response plan

Who signs the mandate

The board, by resolution

Attached at intake.

• Cloud and identity configuration exports (JSON)
• Two prior incident records (PDF)
• Device inventory (CSV)

Initial term

Three months, then rolling

Notice

30 days either side

A reserved day

Up to 8 working hours, including preparation and follow-up

Not included

Emergency and out-of-hours cover, travel and extra days

The person does the work. Alex runs the contracted sessions and owns the professional judgment. Supporting agents prepare intake, evidence, agendas and follow-up, and their drafts are reviewed before anything reaches the client.

1. Qualify the company, stage, problem and leadership fit.
2. Review authorised evidence and agree a baseline.
3. Sign the mandate, capacity and decision-rights schedule.
4. Run the agreed leadership meetings and direct the priorities.
5. Review performance with the sponsor and record decisions.
6. Renew, revise or hand over the mandate with an action register.