Advisors // Greater Boston
Advisory & Fractional CISO Services

Security risk,
deciphered.
Business outcomes,
delivered.

Bridging the gap between technical complexity and executive decision-making - for mid-market companies, PE portfolio companies, and leadership teams that need a seasoned security partner.

Schedule a Strategy Briefing View Services
Eric Galis
Eric Galis
Cybersecurity Advisor & Fractional CISO
▸ 20 years securing enterprises and SaaS platforms across financial services, edtech, fintech, and publishing.
▸ Former SVP & CISO, edTech - built risk-aligned security and compliance functions
▸ Vice-Chair, BostonCISO Advisory Board
▸ Former PricewaterhouseCoopers consultant across 20+ financial services clients
★ 2025 Boston Enterprise CISO ORBIE Award Winner
$20M+
Revenue secured via compliance milestones - EdTech
$10M+
Revenue protected from critical audit failure - FinTech
80%
Reduction in incident resolution time - EdTech
50%
Reduction in incident response time - EdTech
01 // Offerings

Where we work

Engagements are scoped to your actual situation - whether that's advisory services, a specific program gap, due diligence support, or a fractional CISO role. Executive presence and reporting scaled through automation & orchestration.

// 01

AI-Enabled Security Practices

Automating the security grind to maintain business & product velocity without compromising security. Building modern, high-scale practices.

  • AI Governance
  • AI-Powered Product Security Pipeline
  • Agentic False Positive Analysis & Code Fix Recommendation
  • Security Questionnaire Automation
  • SOC Process Improvements
  • Compliance Program Consolidation and Automation
// 02

Strategy & Risk Management

Framework-aligned roadmaps and board-ready risk reporting for leadership teams that need security to function as a business enabler.

  • Executive, Board, & Audit Committee Briefings
  • Fractional CISO Leadership
  • Program Alignment to Accepted Standards & Compliance Readiness
  • Risk Quantification & Executive Reporting
  • Time-Bound, Actionable Strategic Roadmaps
  • Leadership Tabletop Exercises
// 03

GRC & Audit Readiness

From first-time compliance programs to recovery from a failed audit - structured, repeatable governance.

  • Unified Compliance Program Design
  • Audit Readiness Assessment & Remediation
  • Partner & Customer Assessment Findings Recovery
  • IT General Controls (ITGC) Implementation
  • Policy Development & Rewrite
  • Vendor Risk Management
// 04

PE & VC Portfolio Advisory

Security diligence and rapid program assessment for investors.

  • Pre-Acquisition Security Diligence
  • Post-Close Program Assessment
  • Interim Security Leadership
  • Risk Posture Reporting for Investment Committees
  • Security as a Value Creation Lever
02 // About

The plaintext version

Most security advisors only speak to CISOs. I speak to CFOs, CTOs, and board members - translating technical risk into business decisions that protect revenue, enable growth, and satisfy auditors.

I've built security programs from scratch in resource-constrained environments and scaled them eight-fold. My approach is direct, outcome-focused, and grounded in 20 years of doing this work. I tailor my approach to meet the unique needs of each organization, while efficiently leveraging tried-and-true approaches./p>

Start a Conversation
// AWARD

2025 Boston Enterprise CISO ORBIE Award

Recognizing outstanding technology leadership in the Greater Boston market.

// ADVISORY

National Advisory Board, CISOExecnet

Active participant in peer leadership and industry direction since 2015.

// PREV

SVP & CISO, EdTech (2017–2025)

Led 32-person security function, $9M budget, 15M+ end users.

03 // Contact

Ready to move from
ciphertext to plaintext?

Engagements typically begin with a no-cost 30-minute strategy briefing.

EMAIL eric@plaintextadvisors.com
LOCATION Greater Boston, MA
LINKEDIN linkedin.com/in/ericgalis

> SUCCESS: MESSAGE_TRANSMITTED_