Cybersecurity manager as a service
The NIS2 Directive requires a qualified and independent cybersecurity manager. We provide one as a service, backed by an entire IT team.
A role NIS2 requires and the market can't supply
According to expert estimates, the market is short of more than 10,000 cybersecurity specialists. Yet NIS2 requires the cybersecurity manager to meet a knowledge standard, to be independent from the management of IT operations and development and to have direct access to top management. That is why an in-house IT department usually cannot hold this role, and precisely why NIS2 expressly allows it to be entrusted to an external expert.
What a cybersecurity manager does for you
They take over your statutory cybersecurity agenda, from documentation to communication with the authority.
![]()
Risk management
Identifies and assesses the risks to your networks and information systems and proposes measures, fully in the spirit of NIS2, which is built on risk management rather than ticking off checklists.
![]()
Security documentation
Prepares and maintains policies, directives and records in the structure required by the NIS2 Directive and its national implementing rules, ready for an audit or a regulator's inspection.
![]()
Incidents and reporting
Sets up an incident-handling process and, in the event of an incident, ensures reporting within the 24-hour, 72-hour and one-month deadlines via the competent authority's reporting system.
![]()
Self-assessment and audit
Where self-assessment of the effectiveness of measures is permitted, carries it out and documents it; where an independent audit is required, prepares you for it.
![]()
Reporting to management
Regularly and clearly informs top management about the state of security and risks, exactly what leadership needs to meet its legal responsibility.
![]()
Suppliers and people
Oversees the security of the supply chain and coordinates employee training, in combination with our cyber-hygiene training courses.
In-house employee, or a service?
An external manager is not a faceless company. The role is carried out at your organisation by a specific expert, backed by an entire team, who meets both the legal requirements and the independence criterion.
Cybersecurity manager · IT HELPIn-house cybersecurity manager
Your own full-time employee
- A scarce profile, the market has been short of thousands of experts for years
- A full salary even when the workload doesn't fill a full-time role
- Holiday, sick leave or resignation = the role sits vacant
- If they come from the IT department, they clash with the legal independence requirement
- Makes sense for the largest organisations with a full-time workload
External cybersecurity manager from IT HELP
A service with a monthly scope tailored to your needs
- You pay only for the agreed scope, a fraction of the cost of an employee
- Independence from your IT operations is met automatically
- Cover is guaranteed, the role is backed by a team, not a single person
- The backing of an IT company: we can also implement the measures technically
- A fast start, without months of recruitment
How the collaboration works
What you get
An appointed cybersecurity manager who meets the requirements of the NIS2 Directive and the knowledge standard, order in your documentation, statutory deadlines kept under control, and a single phone number for everything from an incident to an auditor's question. Company management gets an overview and proof that it is managing its responsibility for cybersecurity.
Why a cybersecurity manager from IT HELP
Why IT HELP
We've been looking after companies' security for decades, from the network through servers to people. With us, the cybersecurity manager role rests on real technical practice, not on templates.
We provide the cybersecurity manager role nationwide and, to a large extent, remotely too.
Our partners
Frequently asked questions
Do we have to have a cybersecurity manager?
If you are an essential or important entity under the NIS2 Directive, your management is accountable for cybersecurity risk management, and several member states go further and require a named cybersecurity manager in their transposition. Even where the law does not name the role, someone has to own it in practice, with the qualifications and the independence to do so. That is exactly what we provide.
Can the cybersecurity manager be external?
Yes, the NIS2 Directive allows the role to be performed by an external expert. An external manager even comes with one advantage for free: the legally required independence from the management of your IT operations and development is met automatically.
Why can't our IT administrator take on this role?
The cybersecurity manager must not be subordinate to IT operations management, otherwise they'd be checking their own work. Your IT team remains a key partner in implementing measures, but the manager role must sit outside it. That's exactly what the external service is built for.
What requirements must the cybersecurity manager meet?
A knowledge standard defined by the NIS2 Directive and its national implementing rules, plus experience: with a university degree, at least 3 years in IT, of which one year in security management; without one, 7 years of practice. Competence is certified by the relevant national certification body. Our service covers these requirements.
How much does the service cost?
It depends on your company size and the scope of the agenda; we structure the price as a monthly flat fee for the agreed scope. Compared with the salary of a full-time in-house expert, it is typically a fraction of the cost. You'll receive a specific quote after a free consultation.
How quickly can you start?
After the initial meeting and agreeing the scope, we can take over the role within a matter of weeks, without months of recruitment and the uncertainty of whether a candidate will stay.
What if we already have some documentation?
Great, we'll build on it. The cybersecurity manager reviews your existing policies, updates them and adds only what is genuinely missing. We never do anything twice.
What do companies that entrusted us with their IT say?
They once faced the same decision. We have been looking after their IT for years.
“Jungheinrich, a global group with a subsidiary in Slovakia as well, has been working with this team for 27 years. They take exemplary care of our network, which currently has more than 150 computers, to our complete satisfaction, as this long cooperation shows.”
Chief Financial OfficerJungheinrich s. r. o. · 27 years“We have found a responsible partner in information technology. Cooperation in this field is about trust and expertise. This company demonstrates both. Speed of response, professionalism and a human approach are the calling card we encounter every time. We are glad to have found a team of professionals we can rely on.”
IT Manager Production and InfrastructureBNP Paribas Cardif poisťovňa, a. s.“Our cooperation began in 2012. The strengths of this company include responsibility, reliability and precision. Our cooperation on comprehensive IT management continues to this day and we are convinced we will keep developing it.”
Fill the mandatory role without recruiting
Tell us about your situation and we'll propose a tailored scope for the cybersecurity manager service, from taking over the agenda to self-assessment.
„Your trust inspires us“
Related services
NIS2 and cybersecurity legislation
An overview of obligations, deadlines and the whole path to compliance.
→ View overview GAP compliance analysis
Find out exactly what you're missing for compliance and in what order to tackle it.
→ View service Monitoring, oversight and logging
The data and evidence the cybersecurity manager relies on, 24/7.
→ View pillarWhere to Find Us
IT HELP
Čajakova 26, Bratislava, Slovakia
Franz Mika Weg 7/1/25, Wien, Austria
Svatošská 23, Karlovy Vary, Czech Republic
We are available on business days Monday – Friday, 8:00 AM – 5:00 PM (or by arrangement)