A fractional Head of Information Security for Nokkel's ISO 27001 and SOC 2 accreditation

Nokkel gives financial advisers a live view of their clients' property wealth. Its platform brings property and mortgage data into the financial planning process, and the business is authorised and regulated by the Financial Conduct Authority.

Working with financial data on behalf of advisers and institutions puts a company's security practice under close scrutiny. Nokkel set out to meet ISO 27001 and SOC 2 standards, and its policies and controls needed to stand up to audit.

Nokkel wanted someone hands-on. The brief called for a security leader with a financial services background, experience of creating information security policy and process, and the standing to work with C-level stakeholders and third parties.

Consortia had already made a number of hires for Nokkel and knew the business well. Nokkel considered taking the work to an external security consultancy. What they wanted was someone they could work closely with day to day, so they asked Consortia to run the search.

Consortia identified a fractional Head of Information Security to lead the work. We introduced the right person within four days, and he started within two weeks.

We assessed candidates against the detail of the brief: which standards they had taken a business through before, how much of the audit preparation they could carry themselves, and where they would need outside support.

The contract began in January 2024 and ran for 11 months, at two days a week. That gave Nokkel senior security leadership at the level of commitment the business needed, without moving to a full-time hire.

Over 11 months, the appointed leader led Nokkel's readiness for its ISO 27001:2022 audit. The work began with a gap report and recommendations. It moved on to the policies and process documentation needed to put technical controls in place. He also advised Nokkel's leadership on security and compliance as the business planned its growth.

The appointment was part of a longer relationship. Consortia has supported Nokkel on a number of hires across product, engineering, quality assurance and partnerships as well as security, on both contract and permanent terms.

Consortia have supported us on a number of strategic technology hires. Of note was their identification of a fractional Head of Information Security to guide us through our SOC 2 and ISO accreditation and strengthen security standards across the business.

CEO and Founder, Nokkel