Interim cybersecurity without a margin on the hours

The difference

With interim hiring the conventional way, a margin is added to every hour worked. That margin keeps running for as long as the engagement lasts. Over a full-time year it comes to tens of thousands of euros, and the scarcer the profile, the higher that amount.

We charge one amount for the match. After that, there is nothing more.

What that saves depends on the role, the duration and what you pay today. In practice the saving is between 10 and 15 per cent of the total engagement cost, and the rate on your purchase order is lower from the first week.

There is something else built into that old model. With a margin per hour, the intermediary earns more the longer the engagement runs. We earn nothing from how long your programme lasts. That makes a difference to who we put forward.

How it works

1. A one-hour intake. We sharpen the role against the ENISA ECSF role framework. This is often where it turns out you need a different role than you thought.
2. A shortlist within 48 hours. Three candidates, interviewed and assessed by us.
3. You meet two. That is usually enough.
4. You contract directly. The interim professional invoices you directly. We are not in the chain and not in the flow of money.
5. We invoice once. The amount on the price card below, in two instalments.

What it costs

Our fee depends on the weight of the role and the length of the engagement. No quote needed.

All amounts exclude VAT and assume 32 to 40 hours per week. Below 24 hours per week we quote one level lower.

Terms

• A minimum engagement of four months. Anything shorter does not pay off for you, and the calculator shows that too.
• Payment in two instalments: 30 per cent on signing, 70 per cent after the guarantee period ends.
• A 90-day replacement guarantee. If the interim professional leaves within that period, we replace them at no cost or the second instalment lapses.
• If the engagement is extended by another twelve months, we charge 35 per cent of the original amount.
• The client pays. The professional never does, not even hidden in the rate.

Prices valid from 15 September 2026.

For interim professionals

With interim hiring the conventional way, part of every hour goes to an intermediary. Over a full-time year that adds up to tens of thousands of euros. And notice what happens there: the scarcer you are, the more is taken off. The margin is highest for exactly the profiles that are hardest to find.

With us, nothing disappears. What you agree with the client, you receive in full. Whether that money goes to a higher rate for you or a lower price for the client is something you decide together at the table. We are not in between.

• The client pays our fee. You pay nothing, and nothing is deducted from your rate.
• No non-solicitation clause, no non-compete clause, no conversion fee if the client later wants to hire you.
• The contract is between you and the client. That relationship is yours.
• You are assessed by a peer, on risk weighting, reporting line, scope and methodology. We leave exploit and code depth to the client's technical assessment.

Open interim assignments

• Pentest Coordinator Amsterdam · Pentest & Ethical Hacking
• Adviseur Informatiebeveiliging & Privacy Den Haag · GRC
• Privacy Adviseur "Algemene Dienstverlening" Eindhoven · GRC
• Technisch projectleider IAM-integraties Enschede · IAM
• Azure DevOps Governance Eindhoven · GRC

All vacancies →

Compliance

If you contract directly, the working relationship is also assessed directly. We do not leave you to handle that on your own.

For each engagement we provide a contract for services and a supporting file that lets you show, when assessed, how independence is arranged in practice.

We are not a link in the chain. No hirer's liability or chain liability attaches to us, and the engagement letter says so.

Carry out your own tax assessment. We supply the documents and you can review the file in advance.

Where this does not work

Three situations in which you should do something else.

You buy interim through a broker or a framework agreement with rate cards. A one-off fee does not fit there, and neither does direct contracting. For engagements outside that channel, we can help.

You need someone for six weeks. Below four months, an hourly margin is cheaper for you.

You want someone else to carry the credit risk and the invoicing. We deliberately do not do that. That is exactly where the margin we do not charge comes from.

Frequently asked questions

What does it cost to hire an interim CISO in the Netherlands?

Through VigIT People you pay one fixed placement fee for an interim CISO: €15.000 for an engagement of up to six months and €22.500 for an engagement of six months or more, excluding VAT. You agree the interim CISO's rate directly with the professional. There is no margin on the hours worked. Current market rates for interim CISOs are in the salary benchmark.

What is the difference between a fixed placement fee and an hourly margin?

You pay a fixed placement fee once, and an hourly margin on every hour worked for as long as the engagement runs. The fee is set in advance and does not rise if the engagement runs longer. An hourly margin grows with the duration. In practice the total engagement cost with a fixed fee is around 10 to 15 per cent lower, depending on the role and the duration.

Who contracts the interim professional?

The client contracts the interim professional directly. The professional also invoices the client directly. VigIT People is not in the chain and not in the flow of money, and only invoices its own fee, in two instalments.

How quickly can an interim security officer start?

You receive a shortlist of three candidates within 48 hours of a one-hour intake. You usually meet two of them. When a role falls vacant at short notice, an interim candidate can usually start within 2 to 5 working days.

How is the working relationship assessed with direct contracting?

With direct contracting, the working relationship between client and professional is assessed directly. For each engagement VigIT People provides a contract for services and a supporting file that shows how independence is arranged in practice. You carry out the tax assessment yourself, and you can review the file in advance.

Do you also work on NIS2 and DORA programmes?

Yes. VigIT People places interim NIS2 implementation leads, DORA programme leads, GRC leads and IT auditors. A NIS2 implementation lead falls in the senior or lead band, a DORA programme lead in the CISO or programme lead band. At the intake we test the role against the ENISA ECSF role framework.