Security Strategy & Virtual CISO
Board-grade strategy, OKRs, KPIs, KRIs, M&A and tech due diligence that keep investors and executives aligned.
Discuss this service →Cybersecurity & IT Risk for growth-oriented teams
Security and GRC that move at the pace of your next milestone
CyberUp aligns cybersecurity, risk management, and compliance initiatives with your strategic goals covering ISO 27001, SOC 2, IT SOX, PCI DSS, GDPR, NIST, NIS 2 and CIS so you can win enterprise deals, stay secure and lean.
85%
Reduction in audit findings after first 90 days
$120-250K
Average savings on implementation, tools and audit
3 unicorns
Approach combines the best of corporate and scale-up worlds
ISO 27001
SOC 2
IT SOX
PCI DSS
GDPR
NIST 800-53
CIS Controls
PSD2
NIS 2
DORA
Security programs built to empower
Modular services across strategy, compliance, audit, cybersecurity, and operations. Start with what you need. Scale when your risk posture evolves.
GRC & Compliance
ISO 27001, SOC 2, PCI DSS, IT SOX control design and operational effectiveness, audit prep, and compliance automation.
Explore capabilities →Risk & Audit Support
Bridging the gap between auditor language and business reality. Strong evidence delivered for auditors and regulators.
See approach →Cloud & DevSecOps
Hardened architectures, secure pipelines, and overall product security reviews that keep velocity high.
View blueprints →Security Operations
Incident playbooks, logging/SIEM strategy, vulnerability management, and operational excellence.
Learn more →
Founder and CEO
CyberUp is a boutique cybersecurity and GRC consultancy founded by Max Chernousov, CISA, CIA, CEH. With roots as a Gentoo Linux engineer building optimized systems from the ground up, Max brings the same approach to every engagement delivering maximum efficiency, performance, and security for your organization.
View profile on LinkedInBackground
- Former Head of Cybersecurity at high-growth tech companies.
- Ex-Information Security Officer for regulated payments and fintech.
- Audit lead who has navigated PCAOB, ISO 27001, and SOC 2 reviews.
- DevSecOps engineer focused on CI/CD guardrails and cloud hardening.
- ITGC SOX and third-party risk expert.
Practice Areas
IT Risk Management
Audit & Assurance
Due Diligence & M&A
Security Operations
Product Security
Cloud & Infrastructure Security
DevSecOps Enablement
Certifications & Education
- CISA, CIA, CEH
- Cisco CyberOps Associate, GCP & AWS security specialties
- Project management and service management certifications
- Degrees across computer science, information security, and management
- Continuous training across NIST, CIS, CSA, and cloud academies
Depth When You Need It
Each service stream blends executive storytelling, hands-on build, and knowledge transfer so you stay audit ready long after the engagement.
Security Strategy & Virtual CISO
Align strategy, roadmap, and KPIs with risk appetite and investor expectations while keeping engineering empowered.
- Fractional leadership, OKRs, and KPI dashboards for executives.
- Roadmaps linked to funding rounds, markets, and compliance goals.
- Investor / IPO due diligence documentation and coaching.
GRC, Compliance & Certification
Streamline ISO 27001, SOC 2, PCI DSS, GDPR, PSD2, and IT SOX programs without slowing product delivery.
- Control framework design, policies, and evidence automation.
- Internal audit prep, readiness assessments, remediation planning.
- Audit coaching to keep findings minimal and meaningful.
IT Risk Assessment & Audit Support
Risk-based ITGC programs, SOX 404 readiness, and third-party risk management designed for modern stacks.
- Risk registers, control testing, and remediation tracking.
- Vendor diligence, SOC report reviews, onboarding playbooks.
- Executive reporting that drives prioritization.
Cloud Security & DevSecOps / Product Security
Hardened landing zones, secure SDLC guardrails, and collaborative threat modeling for high-velocity teams.
- Cloud environment reviews (AWS, Azure, GCP) with NIST/CIS alignment.
- CI/CD guardrails (SAST, DAST, IaC, dependency scanning) with KPIs.
- Product security coaching, secure coding enablement, and backlog creation.
Security Operations & Incident Response
Resilient operations spanning IR playbooks, vulnerability management, and SIEM strategies tuned to your threat profile.
- Incident response strategy, tabletops, and communication plans.
- Vulnerability lifecycle management and disclosure programs.
- Logging/SIEM architecture with dashboards for SOC and leadership.
Ways to connect
- Email: board@cyberup.io
- LinkedIn: linkedin.com/in/maximchernousov
- Phone: +31 6 19 19 15 19
- We are a remote-first team with an office in Amsterdam
Want to book instantly? Use the scheduling link below.
Book a ConsultationReady to Align Security with Growth?
Book a discovery session to prioritize the next 90 days across compliance, product security, and IT risk. Walk away with clarity and an actionable plan.