Your fractional Head of AI.

One role and one monthly cycle, The Three Peaks: enable your people, automate the repetitive work, secure what ships. What changes is who the work is for.

Firm size: 5 to 500 people
Industries: Healthcare, property management, financial services, and others
Where: Fully remote, with the kickoff in person, on site.

What you get either way

The leadership a full-time hire would bring, at the part-time depth your firm actually needs.

Sets the direction: Ranks where AI will return the most time and keeps a roadmap you own together with your leadership.
Brings your people along: Trains the team, builds practical prompting frameworks, and keeps the usage policy current.
Builds what's ranked: Builds automations that work inside the CRM, email, and documents you already run on.
Owns the security review: Access controls, logging, and human review on every build: the review a CISO would run.

Who needs to change first?

The whole firm

CEOs, owners, COOs, CFOs, and operations leaders

Your whole team using AI every day, and the repetitive work steadily coming off their plates.

Month one: discovery, a baseline of your AI use, and a ranked list of where it pays off
Role-specific training across your AI tools, with practical prompting frameworks
An AI usage policy kept current as tools and use change
A monthly forum to keep adoption moving
New automations each month, connected to the tools your team already uses
Security review, access controls, and logging on every build

The record: Took a regional tax and risk advisory firm from a handful of people using AI to nearly 80% of staff, with a usage policy covering privileged and confidential material. Case study

Best for: Firms where AI use is scattered or hasn't started, and leaders want the whole team working the same way, with a usage policy that holds up.

Your developers

CTOs, engineering leads, and IT leaders

Your engineers using AI tools well and safely, with guardrails your security reviewers and auditors will accept.

Month one: discovery of how your developers work today and where AI will help most
AI coding and review tools set up for your stack and your workflow
A policy for what code and data can go to AI tools, written to stand up to an auditor
Hands-on training for the team, and a review workflow built around your real code
Security review of what ships, run the way a CISO would run it

The record: Built a loan operating system alone, with AI tools: over two million lines of code, with security designed in from the start, through security review, and into production.

Best for: Engineering teams in regulated firms that want AI in their workflow and need security to sign off on it.

Both

Leaders who need both, and someone to own AI

One owner for AI across the firm: both groups moving together, a roadmap you own with your leadership, and reporting your board can act on.

Everything in The whole firm and Your developers
An AI roadmap owned together with your leadership team
Executive and board-level AI reporting

Best for: Firms with no one to own AI, that want a senior leader in the room every month to set direction, keep security in the loop, and keep the work moving.

How it runs

Month one is discovery and a baseline, part of the plan and not a separate audit.
After that, the work is reviewed against the outcome each month, with scope set in writing.
Scope and price are set together on the intro call, by team size and tools.
The work is remote; the kickoff is in person, on site.

What the work covers

AI Enablement & Adoption Training: Firm-wide programs that turn AI policy into daily habits: baseline and team-specific training, practical prompting frameworks, and an AI usage policy for confidential and privileged material. Recently delivered end-to-end for a regional tax and risk advisory firm.
AI Automation: Design and build the automations that give your team time for the work that matters: AI agents and workflows that handle intake, triage, document handling, follow-ups, and handoffs across the systems you already use, with access controls, logging, and human review built in where they matter. For organizations that know they need automation but don't have the team to build it.
AI Integrations: Connect AI agents to the systems where the work already happens (CRM, email, document stores, internal data) so they run on real context instead of one-off copy-pasted prompts, with access controls built in from the start.
Enterprise AI Readiness: Take a promising AI proof of concept the rest of the way: the security review, reliability testing, and governance work that turns a demo into a production service the business can run on and defend to a board or regulator.
AI Governance & Risk Advisory: Say yes to AI faster, with guardrails that hold: model and data governance, third-party AI risk, and policies that keep pace with how the business is actually using AI.

Security leadership, when the work calls for it

Security

Fractional / Virtual CISO

Ongoing executive security leadership without the cost of a full-time hire: strategy, risk management, board and executive reporting, and program oversight.

Security Program Buildout

Stand up or mature a security program from the ground up: policies, controls, risk assessments, and a prioritized roadmap tied to business objectives.

Compliance & Audit Readiness

Prepare for SOC 2, HITRUST, ISO 27001, or customer security reviews with a clear-eyed gap assessment and a realistic path to certification.

Board & Executive Advisory

Translate security and AI risk into business terms for boards and leadership teams, and support incident response when it matters most.

Not sure who needs to change first?

Book an intro call

Or email hello@dreiberge.com