Spinwell Global

Interesting Jobs for Interesting People

Fractional Cyber Security: Why Organisations Are Moving Beyond Permanent Hiring

Why the six-month cyber hire is being replaced by embedded and fractional delivery models

What regulated organisations, hiring managers and founders should do now.

Spinwell Global × Spinwell Startups  ·   6 min read   ·   Cyber Security

---

Fractional cyber security is becoming a key workforce strategy for organisations facing the UK’s growing cyber skills shortage. With more than 11,000 unfilled cyber security roles and increasing regulatory pressure from the proposed Cyber Security and Resilience Bill, employers are combining permanent recruitment with embedded specialists and fixed-scope delivery models to build capability faster.

Last week, we explored what the Cyber Security and Resilience Bill means for regulated organisations, suppliers and cyber professionals. This week, we’re focusing on the practical challenge that follows.

If the Bill expects organisations to have named owners, rehearsed incident reporting, stronger supplier oversight and improved governance, where does that capability come from when traditional recruitment can take months?

Increasingly, organisations are recognising that permanent hiring is only part of the answer. The businesses staying ahead are combining permanent recruitment with fractional cyber security leadership, embedded specialists and fixed-scope delivery so capability exists from day one rather than month six.

The UK Cyber Security Skills Gap Is Growing

The UK’s cyber workforce has grown to around 143,000 professionals, an increase of 5% year on year. On the surface, that appears positive. However, government data still identifies an estimated 11,200 unfilled cyber security roles, with shortages heavily concentrated in specialist disciplines including:

• Cloud security
• Governance, Risk and Compliance (GRC)
• Incident response

Almost two-thirds of vacancies require professionals with two to six years’ experience. This mid-level talent pool is where competition is fiercest.

For hiring managers, this creates a common problem. Generic job descriptions for a “Cyber Security Manager” or “Cyber Security Specialist” are competing for exactly the same limited group of candidates that every other regulated organisation, MSP and consultancy is trying to attract.

The issue isn’t necessarily a lack of talent. It’s often a lack of precision.

What this means in practice

• A single hire is unlikely to solve governance, supplier assurance and incident response simultaneously because they are different disciplines.
• The most competitive section of the market is the two-to-six-year experience bracket, where many GRC and incident response roles sit.
• Recruitment campaigns built around specific business outcomes consistently outperform searches based on vague job titles.

Why Permanent Cyber Security Hiring Isn’t Enough

Permanent recruitment remains the foundation of any mature cyber security function.

However, no organisation can recruit its way around a national shortage of more than 11,000 professionals. As organisations prepare for new regulatory requirements, waiting several months for the ideal permanent hire may leave critical capability gaps exposed.

The organisations making the fastest progress are adopting a blended workforce model built around three complementary approaches.

Embedded cyber security specialists

Fractional CISOs, interim incident response leads and supplier assurance specialists can often mobilise within days, providing immediate expertise while permanent recruitment continues.

Fixed-scope delivery

Statement of Work (SOW) engagements allow organisations to purchase defined outcomes such as:

• Security Operations Centre (SOC) implementation
• Security architecture reviews
• Cyber Security and Resilience Bill readiness assessments
• Supplier assurance programmes

Rather than paying for headcount, organisations purchase a measurable deliverable with agreed timescales and outcomes.

Permanent recruitment

Permanent hiring continues alongside these engagements, ensuring long-term internal capability continues to grow without delaying immediate operational needs.

The common theme is simple.

An empty vacancy is not a security control.

If the board asks who owns incident escalation today, “We’re still recruiting” is no longer an adequate answer.

Why Regulated Organisations Are Choosing Fractional Cyber Security

For many organisations, purchasing an outcome is now more effective than purchasing headcount.

A fixed-scope engagement—whether mapping essential services, designing an incident reporting process or reviewing critical suppliers—provides:

• Defined deliverables
• Clear accountability
• Predictable budgets
• Easier governance
• Better audit evidence

This approach isn’t designed to replace permanent security teams.

Instead, it ensures critical risks are managed while those long-term teams are being built.

How Hiring Managers Should Recruit Cyber Security Talent

Many recruitment campaigns fail because they’re trying to hire one individual to cover multiple specialist disciplines.

• Governance.
• Security architecture.
• Incident response.
• Identity and Access Management (IAM).
• Supplier assurance.
• Cloud security.

These are distinct areas of expertise, not variations of the same role.

Instead of advertising for “a cyber expert,” define the business outcome first.

Examples include:

• Map our critical suppliers.
• Design our incident reporting workflow.
• Improve supplier assurance.
• Prepare evidence for regulatory audits.

Outcome-based recruitment produces stronger shortlists and also translates naturally into embedded or fixed-scope engagements when permanent recruitment isn’t immediately practical.

Why Startups Are Using Fractional CISOs

Fractional cyber security isn’t only for large regulated organisations.

It’s increasingly becoming a practical solution for startups preparing to work with healthcare, government, defence, financial services, transport and critical infrastructure customers.

Many early-stage businesses face extensive cyber security due diligence long before they’re formally regulated.

Investors, procurement teams and enterprise customers increasingly expect mature security governance regardless of company size.

A Fractional CISO gives startups access to senior cyber security leadership without committing to a full-time executive salary.

Typically delivered on a retained or day-rate basis, fractional leadership allows founders to strengthen governance, improve customer confidence and prepare for future regulation while preserving cash flow.

Compliance Considerations for Fractional Cyber Security Teams

Embedded specialists often receive privileged access to an organisation’s most sensitive systems.

That makes onboarding and offboarding just as important as recruitment.

Before an engagement begins:

• Confirm IR35 status before work starts.
• Grant system access based on the agreed scope, not standard employee permissions.
• Remove all access immediately when the engagement ends.

Most fractional cyber security engagements operate under clearly defined Statements of Work or day-rate agreements.

When structured correctly, organisations receive certainty over deliverables while contractors gain clarity around tax status, responsibilities and project scope.

How to Build a Flexible Cyber Security Workforce

Whether you’re leading a regulated organisation, managing recruitment or scaling a startup, the first step is identifying which capability gaps represent today’s operational risks.

Some vacancies can wait for permanent recruitment.

Others can’t.

For those immediate priorities, embedded cyber security specialists, Fractional CISOs and fixed-scope delivery models often provide faster, lower-risk solutions than leaving key positions vacant for months.

The organisations adapting most successfully to the UK’s changing cyber security landscape are no longer choosing between permanent recruitment and flexible expertise.

They’re combining both.

As regulatory expectations continue to increase and specialist talent remains scarce, organisations that embrace fractional cyber security, embedded delivery and permanent recruitment together will be far better positioned to strengthen resilience, reduce operational risk and respond confidently to future compliance requirements.

How Spinwell Can Help

Spinwell Global recruits permanent, contract, interim and embedded cyber security professionals across governance, risk and compliance (GRC), security architecture, Security Operations Centres (SOC), incident response, IAM, DevSecOps, penetration testing and information security leadership.

For startups, Spinwell Startups provides flat-fee recruitment, Fractional CISO and CTO services, international talent sourcing and six months of structured post-placement support through Spinwell Engage.

Whether your organisation needs a permanent hire, an embedded specialist or a fixed-scope cyber security engagement, our teams can help you build the capability needed to meet today’s operational challenges and tomorrow’s regulatory expectations.

Frequently Asked Questions

What is fractional cyber security?

Fractional cyber security gives organisations access to experienced cyber security leaders, such as a Fractional CISO, on a part-time or project basis instead of employing them full time.

What is an embedded cyber security specialist?

An embedded cyber security specialist joins an organisation temporarily to deliver a defined outcome, such as improving governance, supplier assurance or incident response capability.

When should organisations hire a Fractional CISO?

A Fractional CISO is ideal when an organisation requires senior cyber security leadership but doesn’t yet need a full-time executive or wants specialist expertise while recruiting permanently.

Is permanent recruitment still important?

Absolutely. Permanent recruitment remains the best long-term strategy for building internal capability. Many organisations now combine permanent hiring with embedded specialists and fractional leadership to deliver immediate capability while growing their permanent teams.

---

Get in touch with us

Sources

1. Department for Science, Innovation and Technology (DSIT), Cyber Security Skills in the UK Labour Market 2025.
2. Invitise Insights, The UK Cyber Skills Gap Is Widening: What It Means for Hiring in 2026.
3. Internet Safety Statistics, Cybersecurity Skills Gap Statistics for the UK.
4. Firebrand Training, Closing the UK Cybersecurity Skills Gap in 2026.
5. Lorien Insights, How Can Organisations Close the Cyber Security Skills Gap in 2026?

Figures were the most recently published at the time of writing and should be checked against the original DSIT release before external use.

Contract Hiring UK: Why Temporary Recruitment Is Rising in 2026

Permanent hiring is slowing. Contract hiring is at a three-year high. Here is what that means for your workforce strategy.

The UK jobs market sent a clear signal in July 2026. Organisations are accelerating contract hiring at a pace not seen since 2023 while pulling back on permanent headcount. This is not a seasonal blip. Multiple independent data sources confirm the shift is structural. Here is what is driving it, what it means for hiring managers and candidates, and how to position your organisation for the second half of the year.

Spinwell Global   ·   5 min read   ·   Workforce strategy and specialist recruitment

---

The KPMG and REC UK Report on Jobs, produced by S&P Global and published in July 2026, recorded temporary staff billings rising at the quickest rate since April 2023. The Temporary Billings Index reached 52.7 in June, up from 52.2 in May, rising for four consecutive months. At the same time, permanent placements declined, at the slowest pace in three months, but declined nonetheless. The Permanent Placements Index registered 49.1, creeping closer to the neutral level of 50 but still below it.

That combination tells a precise story about where employer confidence sits right now. Organisations are not stopping hiring. They are changing how they hire.

Permanent headcount carries commitment: National Insurance contributions that increased in April 2026, Employment Rights Act obligations now coming into force in phases, redundancy liability and a long onboarding cycle before productivity returns. In an environment of ongoing uncertainty, cost pressure and rapid skills evolution, more organisations are choosing to bring expertise in on a contract basis rather than lock it in permanently.

This is not a crisis. For the right organisations and the right candidates, it is an opportunity worth understanding properly.

52.7 Temporary Billings Index, June 2026, highest since April 2023 (above 50 = growth)

37% Of UK employers plan to reduce permanent hiring due to Employment Rights Act reforms (CIPD)

74% Of UK employers expect the Employment Rights Act to increase their employment costs (CIPD)

Sources: KPMG/REC/S&P Global UK Report on Jobs, July 2026; CIPD Labour Market Outlook, February 2026

What is driving the shift to contract hiring

Several forces are converging simultaneously to make contract hiring more attractive to UK organisations right now.

The Employment Rights Act. The CIPD, the professional body for HR and people development, surveyed more than 2,000 UK employers and found that 74% expect the ERA to increase their employment costs, and 37% plan to reduce permanent recruitment as a direct result. The CIPD noted explicitly that this could have the unintended consequence of encouraging employers to rely more heavily on temporary workers and self-employed contractors to avoid rising costs. That is not a prediction. It is what the data from July 2026 shows is already happening.

Project-led demand returning. Many organisations deferred technology investment during periods of economic uncertainty in 2024 and 2025. Those projects have not disappeared. Pressure to modernise systems, implement AI, strengthen cybersecurity and complete digital transformation programmes has returned, and these are time-bound, deliverable projects. They are well suited to contract resource rather than permanent headcount.

Skills that evolve faster than permanent hiring cycles. In disciplines like AI, cloud engineering, cybersecurity and data architecture, the specific technical requirements can shift materially within 18 months. Organisations are increasingly reluctant to make permanent commitments in areas where the role itself may look significantly different within two years. Contract resource gives access to current expertise without that long-term bet.

Increased candidate availability. The ONS Labour Market Statistics published in June 2026 recorded continued increases in redundancy notifications. UK recruitment consultancies surveyed by S&P Global for the July KPMG/REC report signalled further marked increases in candidate availability. Strong, experienced contractors have returned to the market at the same moment that demand for contract resource is rising.

“Organisations are not stopping hiring. They are changing how they hire. And the shift is structural, not temporary.”

When contract hiring makes sense and when permanent hiring works better

The growth in contract hiring does not mean permanent employment is becoming obsolete. It means organisations need to be more deliberate about which model they use for which role. Getting that decision right is one of the most important workforce strategy choices available in the current environment.

Contract hiring works well when:

• The need is project-specific and time-bound. A cloud migration, a compliance programme, a cybersecurity audit, a digital transformation sprint. These have defined scope and end points. A contractor delivers the expertise and exits without the need for redeployment or redundancy.
• Speed matters more than continuity. Contractors are typically available within weeks rather than months. When a project cannot wait for a full permanent hiring cycle, contract resource removes the bottleneck.
• The skills required are highly specialist and scarce. For disciplines where the global talent pool is small, the permanent market can take months to yield a strong candidate. Contract access to that same pool is often faster because contractors are more mobile and more frequently available.
• Cost flexibility is a priority. Day rates can appear higher than equivalent permanent salaries, but when employer obligations, onboarding costs, benefits and long-term retention are factored in, contract hiring can be more cost-efficient for finite, deliverable work.

Permanent hiring works better when:

• The role is ongoing, core and strategic. Institutional knowledge, long-term client relationships and cultural alignment are difficult for contractors to replicate. Where continuity is the priority, permanent employment remains the right model.
• The organisation is building a team over time. Contractors can fill capability gaps. They are rarely the foundation for building culture or developing internal expertise over time.
• The role requires long-term security accountability. While many cleared professionals work on a contract basis, roles where ongoing security responsibility and continuity of clearance management are critical may benefit from the permanence of employment.

What candidates need to know about contracting in 2026

If you have historically worked in permanent roles, the current market warrants a serious look at contracting. The conditions in July 2026 are more favourable for contractors than at any point since before 2023.

Day rates for specialist contractors in digital, technology, cybersecurity and risk have remained resilient despite broader market softening. Demand for project-based expertise is rising. The availability of contract opportunities through framework agreements such as Digital Outcomes and Specialists 7 means that for public sector-facing specialists, the route to contract work has become more structured and accessible than ever before.

A few important things to understand before making the move:

IR35 status determines how you are taxed. Operating outside IR35 through a personal service company gives you significantly more flexibility in how you manage your income. A role determined to be inside IR35 means you are taxed broadly as an employee, without the benefits of employment. Understanding your status before accepting a contract is essential. The IR35 rules have also changed during 2026 in ways that affect both contractors and the organisations engaging them, so current and specific advice matters.

Security clearance significantly increases your value and deployability. SC and DV cleared contractors are among the most sought-after professionals in the current UK market. If you hold clearance and are considering contracting, your market position is likely stronger than you realise. The roles requiring clearance are also among the least likely to be publicly advertised, which makes the right recruiter relationships even more important.

The right recruiter matters more in contracting than in permanent. Contract roles move at a different pace. The window between availability and placement can be days rather than weeks. A recruiter who already holds your profile, understands your specialism and has active client relationships in your sector is the primary route to opportunities before they are filled.

“Contract roles move fast. The window between availability and placement can be days, not weeks. Being known before you are looking is what makes the difference.”

What this means for startups

For startups, the shift towards flexible workforce models is not new. Most early-stage companies have always needed to access senior expertise before they can justify permanent headcount at that level. What has changed in 2026 is that the supply of experienced fractional and contract professionals has increased significantly, making this a genuine and deep market rather than an informal arrangement.

A seed-funded startup that needs a CFO does not need one five days a week from day one. It needs someone with the right experience, available on a fractional basis, who can build the financial infrastructure the company needs and transition to full-time when the business is ready. The same logic applies to CTOs, Heads of Operations and senior commercial leads.

This is precisely the gap Spinwell Startups was built to address. Any startup, at any funding stage, anywhere in the world. Flat fee placement. Fractional senior leadership. A six-month structured engagement on every hire. Access to a pre-screened global candidate pool of over 108,000 professionals.

The contract and fractional market of 2026 is, in many ways, the natural habitat of the best startup hiring. The flexibility, speed and access to specialist expertise that make contracting attractive for large organisations are the same qualities that define what startups need from the moment they begin hiring.

The Spinwell perspective

We place both contractors and permanent professionals across digital, technology, risk and security, predominantly into public sector programmes but increasingly across private sector and global startup clients from our offices in the UK, Dubai and Singapore.

What we are seeing in July 2026 is consistent with what the independent data confirms. The contract market is the most active it has been in three years. The organisations navigating the current environment well are the ones making deliberate decisions: permanent for roles that are core, ongoing and where continuity matters; contract for work that is project-based, time-bound and specialist.

And the candidates who are thriving in this market are the ones who positioned themselves to be found before the opportunity existed. Whether through an active relationship with a specialist recruiter, a current and well-maintained professional profile, or simply a conversation about the market before the pressure to move arrived.

About Spinwell Global

Spinwell Global is a specialist recruitment consultancy with offices in the UK, Dubai and Singapore. We place contractors and permanent professionals across digital, technology, risk and security into public sector, private sector and startup organisations worldwide. We are an approved supplier on the Digital Outcomes and Specialists 7 (DOS7) framework through the Government Commercial Agency (GCA).

Spinwell Startups provides flat fee, globally-sourced recruitment for startups at any funding stage, anywhere in the world.

 

Get in touch with us

Sources

KPMG UK and REC (Recruitment and Employment Confederation), UK Report on Jobs, July 2026. Compiled by S&P Global.

S&P Global / KPMG / REC. UK Report on Jobs: London, June 2026.

CIPD (Chartered Institute of Personnel and Development). Labour Market Outlook, Winter 2025/26. Published February 2026.

CIPD. The Unintended Consequences of the Employment Rights Bill. Research Report, 2025/26.

Office for National Statistics (ONS). UK Labour Market Statistics, June 2026. Published 18 June 2026.

Office for National Statistics (ONS). Redundancies by Age, Industry and Region (RED02). Released 18 June 2026.

House of Commons Library. UK Labour Market Statistics Briefing (CBP-9366). Updated July 2026.

FM Magazine. Temporary Hiring Increases in the UK, Report Shows. Published 15 July 2026.

5 Essential Questions to Ask Before Accepting a Job Offer

5 Essential Questions to Ask Before Accepting a Job Offer

 

 

Get in touch with us

NK

Job Hunting whilst Employed

Your Guide to CV Writing