Risk over noise
A scanner hands you a thousand findings. The useful part is knowing which nine matter this quarter, and what they cost.
About
About Soteric Cyber
An independent advisory practice. Executive counsel on security, AI, and the strategy around them — for a small number of clients at a time.
The idea
A lot of companies sit in an awkward middle: too big to ignore security, too small to justify a full-time executive to own it. The usual options are a compliance platform that produces paperwork, a tool vendor that produces alerts, or a large consultancy that produces a document. None of those decide anything.
What works is someone senior who understands the business, has run programs at scale, and sits beside the people holding the budget rather than underneath them. AI widened that gap — companies are committing faster than their governance was built for, and most available advice is either out of date or sold alongside a product. Covering security and AI from one chair is deliberate.
How I work
- Vendor neutral. No resale agreements, no commissions, no platform to sell you.
- Plain language. A position an executive can act on and an engineer can respect, in the same document.
- Risk-ranked. Twelve criticals isn't a strategy. You get an order, a cost, and the reasoning.
- Independent of delivery. I don't build what I recommend, so the recommendation isn't shaped by who gets paid to build it.
- Right-sized. Ambition scaled to your actual risk, headcount, and budget.
- Honest scoping. If you don't need the engagement, I'll say so.
Who you work with
One advisor
The person you meet on the first call is the person advising you.
Founder & Principal Advisor
Soteric Cyber LLC
CISSP
26 years’ experience
Program Management
Engineering
Cybersecurity
Twenty-six years across program management, engineering, and cybersecurity, holding the CISSP. Enough engineering background to know when a plan is fantasy, and enough program experience to know what it takes to land one.
Only a few engagements run at once — no handoff to a delivery team, no queue behind a larger account.
Principles
Working principles
Strategy that survives contact
A plan that ignores how the organization actually works gets quietly abandoned. Strategy has to fit the way your teams already deliver.
Leave you self-sufficient
You should need less of this over time. Direction your own leaders can carry forward, not dependency on an outside advisor.
If it sounds like a fit
Get in touch, or see what engagements involve first.