IT, Security & Risk Executive Search

Security leaders built for high-stakes strategy

Onboard resilient CISOs, Chief Risk Officers, or Heads of IT prepared to deliver rigorous, quarterly corporate oversight. Partner-led execution from intake to placement.

85% Return Rate
4.9 out of 5 rating
108 median days to close
98% Placement Rate
The Function

IT, Security & Risk
executive search

Security moved onto the board agenda and has not left. Following the SEC's 2024 disclosure rule, 81% of public-company boards now expect quarterly security briefings, which changes what the job actually is: the CISO has to manage an incident at three in the morning and then explain it to the audit committee in the language of capital allocation. AI added attack surfaces that did not exist three years ago, from model security to training-data provenance, and the leaders who have built against them firsthand are a smaller pool than the demand suggests.

Source:  ON Partners Widening Gap, 2026, Deloitte Global Cyber Executive Briefing 2025

Role in this function

The different layers of security leadership

A sample of the security seats we fill, from a company's first dedicated security executive to the CISO who answers to the board. Our partners can tell you which scope your business actually needs.

The Role

Chief Information Officer & CISO

The CIO builds the platform; the CISO defends it. They draw from different talent pools and answer different board questions, but the companies that get technology leadership right hire them as a pair, with mandates that fit together instead of overlap. We've placed both seats, from global public companies to PE-backed platforms, and we know which hire your risk actually calls for first.

Visit our CISO Page
A sample of our work in this area
Bloom_Energy_logo.svg
diebold nixdorf
ADT
knowbe4
lumentum logo-1
advance energy
EverCommerce
Heico_logo.svg
merck logo
The Role

Vice President Positions

Whether the seat is IT, enterprise applications, or information security, this is where the platform actually gets run: the systems, the integrations, the controls, and the response when something breaks. Each draws from a distinct talent pool, and the right profile depends on what your technology leader needs lifted first. Our recent placements span all three, from enterprise applications leaders at global manufacturers to IT security heads inside software companies.

Visit Our Vice President & Senior Leadership Page
A sample of our work in this area
merck logo
advance energy
fleet pride logo
HIG_Capital_Logo
stack infrastructure logo
GILLIG-Logo-e1752071083506
elmer swim school logo
Unison_Logo
fairway lawns
Our clients

Companies trust ON Partners

In their words

What clients say after the placement.

1 / 3

OnPartners team was enthusiastic to work with and they quickly understood our mission, who we are as a company and what we are looking for. 

Cybersecurity Product
Head of Human Resources
Common Questions

What leaders may ask before a search

Most commonly when enterprise customers begin requiring security attestations (SOC 2, ISO 27001), when the company crosses meaningful scale, or when a board with public-market sophistication requires it. Before that, a strong VP of Security typically suffices.

A PE-backed CISO owns security posture across the portfolio company and increasingly across the fund's full portfolio. The role has shifted from compliance and audit toward strategic risk management, board-level reporting, and incident readiness.
Increasingly yes. AI-native companies face emerging risk surfaces (model security, training-data provenance, AI supply chain) that traditional CISOs may not have built against. The right hire has either lived through it or has deep curiosity about it.
The CFO owns strategic finance: fundraising, board, capital allocation. The CAO owns the close, the audit, and accounting policy. In smaller companies the CFO does both; once you cross ~$50M revenue or near a public offering, you may require both.