Abbott
Aegon
Airbnb
Amazon
American Airlines
AmerisourceBergen
Anthem
Apple
AT&T
AutoNation
AutoZone
Bank of America
Baxter
BP
Bridgestone
Capital One
Cardinal Health
Centene Corporation
Ceridian
Cisco
CNA
Costco Wholesale
CVS Health
Disney
Emerson
Farmers Insurance
Federal Reserve System
Fifth Third Bank
Fresenius Medical Care
Gates
General Electric (GE)
Harley-Davidson
HBC (Hudson's Bay Company)
HCSC (Health Care Service Corporation)
Ingram Micro
Johnson Controls
Kaiser Permanente
Lenovo
Levi's
Marathon
McCormick
McKesson
MGM
Morningstar
Motorola
NBC
New York Life
NielsenIQ
Nike
Northern Trust
Prudential
Ricoh
Saks Fifth Avenue
SC Johnson
Snapchat
Spectrum
Stanford University
Target
Tesla
Transamerica
Trek
UnitedHealth Group
Vail Resorts
Visa
Wells Fargo
Westinghouse
Wintrust
Wynn
XPO Logistics
Frequently asked questions
Frequently asked questions about hiring cyber, IT, and AI leadership
Forty-nine questions, answered in full. The list was built from what hiring leaders and security executives actually ask in public, then answered against how RED SKY runs a search: what happens at intake, what is verified before a candidate is submitted, what the guarantee covers, and what a leader is told about a role before an interview rather than after an offer.
Two audiences Hiring organizations and candidates are answered separately, because the two sides ask different questions and deserve the same honesty.
Nothing missing Where a figure is still being confirmed, this page shows the placeholder rather than a number nobody can source.
No questions match that search
Try a shorter term, clear the filters, or send the question directly. Every message reaches a consultant rather than an inbox nobody reads.
For hiring organizations
Questions from the hiring side
Fees, timelines, verification, guarantees, and role design. The questions boards, chief information officers, and talent leaders raise before a mandate opens.
Engagement and fees5
What is the difference between retained and contingency search, and which does RED SKY use?
Contingency search pays only on placement, so several firms compete to submit first and volume decides the outcome. Retained and engaged search commits one firm to one mandate, with the fee structured across the search rather than landing entirely at the finish line.
RED SKY runs executive placement on a retained or engaged basis. A seat that carries board exposure and regulatory accountability is not a seat to fill with whoever arrives first. Direct hire, contract, and contract-to-hire work under Precision Staffing Solutions runs on a separate commercial model, priced against the role and the duration.
How are executive search fees calculated?
Across the retained market, fees are commonly priced as a percentage of first year cash compensation and billed in thirds: an engagement portion at kickoff, a milestone portion at slate delivery, and the balance on signature. Fixed project fees are also common where the scope is tightly defined.
RED SKY prices against the mandate rather than applying a blanket percentage. The compensation brief is agreed during intake, so the band is settled before candidates enter the process and nobody discovers a gap at offer stage. Commercial terms are confirmed in writing before a search opens.
What is actually negotiable in a search agreement?
The headline percentage attracts the attention, and three terms underneath it matter more: the guarantee period, the billing schedule, and the written definition of a completed placement if a hire exits early.
RED SKY settles those three in the agreement before a search begins rather than after an invoice arrives. A guarantee argued after a departure is an argument nobody wins.
Which engagement models does RED SKY offer?
Four service lines cover the range. Executive Placement handles retained and confidential leadership search. Precision Staffing Solutions handles direct hire, contract, and contract-to-hire. Professional Services and SOW handles scoped delivery work including identity and access management, vCISO advisory, governance, and testing. AI Talent and Strategy handles AI leadership hiring and AI team design.
Engagements frequently combine two of them. The common pairing is a contract specialist holding a function while a permanent search runs alongside it, so coverage never lapses during the search.
Related Executive Placement Precision Staffing Solutions Professional Services and SOW AI Talent and Strategy
Can RED SKY work alongside an internal talent acquisition team?
Yes, and many engagements do. Internal teams are built for volume and for roles where a real applicant pool exists. RED SKY is built for the opposite problem: a small number of seats where a wrong hire is expensive and the right person is not applying anywhere.
Division of labour is agreed at intake, including who owns candidate communication, so a candidate never receives two versions of the same process from two sources.
Timelines and process4
How long does an executive search take?
Average executive search runs [STAT: exec_search_days]. Average submittal to hire across staffing engagements runs [STAT: submittal_to_hire].
Ranges move with clearance requirements, compensation approval cycles, and interview panel availability. Searches that stall usually stall on the hiring side rather than the market side, because authority, budget, or reporting line were never settled. Those three are locked during intake for exactly that reason.
Related The Triton Vetting Process
Why do some searches run six months or longer?
A long search is usually a symptom of an unscoped mandate. When the interview panel disagrees about what the role owns, candidates arrive into that disagreement and the process resets around them.
Scope, budget, reporting line, and success measures are confirmed before outreach begins, so the clock does not stop halfway. Where a mandate cannot be settled during intake, RED SKY says so before a search opens rather than three months into it.
What does a client see while a search is running?
A named consultant who runs the search day to day, an agreed status cadence, and a running view of the pipeline: roles mapped, leaders approached, candidates in assessment, and candidates ready for submission.
Silence between submissions is the complaint hiring leaders raise about search firms more than any other. It is a process failure, and it is avoidable.
How quickly can a contract or contract-to-hire role be covered?
Faster than executive search, because the specialist network is already vetted and available. Average submittal to hire runs [STAT: submittal_to_hire].
Where a function is exposed and the permanent hire is months away, coverage usually starts with a contract specialist while the permanent search runs in parallel. The control stays live instead of waiting on a signature.
Related Precision Staffing Solutions
Vetting and verification5
How does RED SKY vet candidates?
Through the Triton Vetting Process, RED SKY's proprietary methodology, refined across [STAT: triton_years] years of specialist placement.
Triton covers technical validation against the real scope of the role, structured scenario assessment, employment and identity confirmation, and reference depth beyond the names a candidate offers first. Certifications are recorded and never treated as evidence of judgment under pressure.
Related The Triton Vetting Process
How does RED SKY handle fake candidates and identity fraud?
Identity fraud moved from a hiring nuisance to a security control after KnowBe4 publicly disclosed that it had hired a North Korean operative using a stolen identity, through a standard remote interview process with multiple rounds.
Employment history and identity are confirmed before a candidate reaches a client, and that standard holds for remote and hybrid mandates rather than relaxing for them. Pattern matching a resume is guessing, not verification.
Are personality tests part of the assessment?
Generic personality instruments measure the wrong thing for a seat that carries liability. Assessment is scenario based: how a leader scoped an under-resourced program, how they briefed a board during a live incident, how they resolved a governance conflict with a peer executive.
Evidence of judgment already exercised predicts performance in the seat far better than a profile score does.
How many candidates appear on a shortlist?
A short slate of qualified leaders, sized against the scope of the role and agreed during intake.
Submitting volume transfers the screening work back to the hiring team and consumes the calendar of every interviewer involved. A slate that takes an afternoon to review is doing its job. A stack that takes a fortnight is not a slate.
What happens to candidates who are assessed but not submitted?
They stay in a maintained specialist network rather than a discarded pile. A leader who is wrong for one mandate is frequently right for the next one, and the relationship is the asset that makes the next search faster.
Candidate information is held under the terms set out in the privacy policy and is never circulated to organizations that have not engaged RED SKY for a specific role.
Related Privacy policy
Guarantees and replacement3
Does RED SKY guarantee placements?
Yes. RED SKY carries a [STAT: placement_guarantee] placement guarantee, alongside a [STAT: placement_success] placement success rate.
The guarantee period and everything it covers are set out in the engagement agreement. A guarantee described verbally and never written down is a marketing number, and it fails at the only moment it matters.
What happens if a placed executive leaves inside the guarantee period?
The agreement states what happens before it happens: the conditions that trigger a replacement search, the conditions that trigger a fee adjustment, and the exclusions that apply to neither.
A departure caused by a restructure, an acquisition, or a role that changed materially after hire is treated differently from a hiring miss. Those distinctions are written down at the start, when both parties can discuss them calmly.
What replacement guarantee is normal in this market?
Ninety days is the common standard for contingency placement. Six months is the common standard for retained and engaged search. Twelve month guarantees exist at executive level and remain less common.
Guarantee length on its own is a weak signal. A long guarantee attached to a role nobody can survive still ends in a vacancy, and the replacement inherits the same conditions. Retention past the first year is the number worth asking about.
Role design and compensation5
A leadership role has been open for months with no strong candidates. What is usually wrong?
Three causes account for the majority of it. The compensation band sits below the accountability the specification assigns. The reporting line places the leader somewhere the authority is not. Or the scope combines two jobs that no single person holds at once.
All three are visible during intake, and all three cost far less to fix before outreach than after a declined offer.
Related Talk through an open mandate
Where should a CISO report?
Practice varies by organization, and one pattern is consistent among sitting security leaders: unfiltered access to the chief executive and the board matters more than the box on the chart.
A security leader reporting inside the technology function they are expected to assess creates a conflict that surfaces during the first serious incident. Senior candidates raise this in the first conversation, so the reporting question is settled with the client before anyone is approached.
Does RED SKY advise on compensation?
Yes. A compensation brief forms part of intake, built from what comparable roles are paying now in the relevant sector and geography rather than from what the previous hire cost three years ago.
Where a band does not support the accountability written into the specification, that is raised before the search opens instead of surfacing at offer stage.
Related Executive Placement
Will RED SKY tell a client that a role is not ready to hire?
Yes, and during intake rather than three months later. A mandate with unclear authority, an unfunded program, or a title created to close an audit finding will fail in the market before it fails in the seat.
Raising it early costs one conversation. Staying quiet costs a search, a candidate relationship, and roughly two quarters of exposure.
How is the boundary between the CISO and a Chief AI Officer handled?
Ownership is mapped before either search opens: who owns AI risk, who owns model governance, who owns data, and where the escalation path runs when those three disagree.
AI leadership adoption has moved quickly, and the failure mode is rarely the candidate. It is two executives holding overlapping charters that nobody wrote down. RED SKY maps that boundary during intake on any AI leadership mandate.
Related AI Talent and Strategy
Confidentiality and data3
Can a search be run confidentially?
Yes, and at executive level it is routine, most often when an incumbent is still in the seat.
The mandate is described to approached leaders in enough detail to be evaluated seriously, while the identity of the organization stays withheld until a defined stage. Who learns what, and when, is agreed in writing before any outreach begins.
Related Executive Placement
Does RED SKY sign non-disclosure agreements?
Yes, with clients and with candidates, and the obligation runs in both directions.
Information shared during a search is limited to what the search actually requires. Confidential means a controlled process, not a vague job description.
How is client and candidate data handled?
Data is collected to run a specific engagement, held under the terms in the privacy policy, and shared only with the parties involved in that mandate.
Resumes are never circulated speculatively to organizations that have not engaged RED SKY for the role in question.
Related Privacy policy
Roles, sectors, and coverage5
Which roles does RED SKY place?
At leadership level: CISO, CIO, CTO, Chief AI Officer, and vice president and director level security, infrastructure, and data leadership, including board facing and transformation mandates.
Below that line: security architects, identity and access management engineers, governance and compliance specialists, penetration testers, cloud and platform engineers, and AI and machine learning practitioners. Executive Placement and Precision Staffing Solutions cover the two ends of that range.
Which industries does RED SKY work in?
Financial services, healthcare, technology, public sector and defense, energy and critical infrastructure, and retail and consumer.
Regulatory posture differs sharply across those verticals. Scoping a security leadership role inside a NERC CIP environment has little in common with the same title inside a PCI DSS environment, and the assessment changes accordingly.
Related Industries
Does RED SKY support searches outside the United States?
RED SKY supports multinational organizations and mandates that span more than one region.
Coverage for a specific country is confirmed during intake, along with the employment model, the compensation benchmark, and any data residency constraint that applies to candidate information in that jurisdiction.
Related Talk to RED SKY about coverage
Does RED SKY work with mid-market organizations, or only large enterprises?
Both. The client portfolio includes [STAT: fortune_100_share] of the Fortune 100 and [STAT: fortune_500_share] of the Fortune 500, alongside private equity backed companies and mid-market organizations hiring a first security leader.
Scoping work matters more at the smaller end, because a first security leadership hire sets the authority pattern that every subsequent hire inherits.
Related Results
Can RED SKY deliver a project rather than a hire?
Yes, through Professional Services and SOW. Fixed scope delivery covers identity and access management, privileged access management, vCISO advisory, governance and risk programs, and penetration testing.
Where a program has to move and the permanent team does not exist yet, scoped delivery runs first. Hiring then follows the operating model instead of guessing at it.
Related Professional Services and SOW
Choosing a search partner3
Why use a specialist firm instead of a generalist executive search firm?
A generalist firm treats a security leadership search as one requisition inside a machine that also fills chief financial officer and chief marketing officer seats.
Specialist depth shows up in three places: knowing which titles carry real scope and which are inflated, knowing what a program of that size actually costs to run, and holding relationships with leaders who appear in no database. Depth of engagement with one market, rather than the size of a firm's brand, is what separates outcomes.
Related About RED SKY
What should a hiring team ask any search firm before signing?
Six questions are worth asking every time. Who runs the search day to day, and whether that person was in the pitch. What the verification standard is before a candidate is submitted. What the guarantee covers and what it excludes. How many searches the lead consultant is carrying at once. What happens if the specification turns out to be wrong. And what evidence exists of placements holding past the first year.
A firm that answers the first four comfortably and deflects the last two is telling the hiring team something useful.
Why pay a search fee when the role can simply be posted?
A posting reaches leaders who are looking. Senior security and AI leaders in strong positions are not looking, and the population that responds to a posting is a self-selected slice of the market.
The fee buys access to leaders who never see the posting, verification completed before anyone is submitted, and a structured assessment of judgment rather than an interview panel's impression on a Thursday afternoon.
Related Executive Placement
For candidates and executives
Questions from the candidate side
Confidentiality, compensation, role quality, and what a leader is told before an interview rather than after an offer.
How the process works5
What happens after a candidate contacts RED SKY?
A conversation about the work rather than a resume screen. What the leader owns now, what they want to own next, what conditions would make a move worth making, and what would keep them where they are.
Roles are introduced when a real mandate matches. Candidates are not added to a speculative pipeline to make a database look healthy.
Related Candidates
Will RED SKY submit a resume without permission?
No. A resume goes nowhere without explicit approval for a named role at a named organization.
Circulating candidate documents speculatively damages the candidate first and the market second, and it is the single fastest way for a search firm to lose access to the leaders worth knowing.
What does RED SKY share about a role before an interview?
The scope, the reporting line, the compensation band, the budget and headcount the role controls, the reason the seat is open, and the parts of the mandate that are genuinely difficult.
A leader who discovers the real constraints after signing had a poor process, whoever ran it. Difficult conditions disclosed early are survivable. The same conditions discovered in month four are not.
Does declining a role affect future opportunities with RED SKY?
No. A leader who walks away from a role that would not have worked made a correct decision, and that judgment is useful information for the next introduction.
Pushing back on terms is normal negotiation and is treated as such.
How often will a candidate hear from RED SKY?
When there is something worth saying. Candidates inside a live process receive status on an agreed cadence, including the outcome when a decision goes another way.
High volume outreach with no specific mandate behind it wastes the time of the exact people the firm needs to keep on the phone.
Confidentiality for candidates2
Will a current employer find out that a candidate is in a process?
No. Confidentiality is the operating default at senior level.
Nothing is shared with any organization without explicit approval for that organization. References are contacted only at a stage the candidate agrees to, and communication runs through the channel the candidate nominates.
Who sees a candidate's information?
The consultants running the specific mandate, and the client for the role the candidate approved.
Candidate information is never sold, rented, or passed to third parties. Handling terms are set out in the privacy policy.
Related Privacy policy
Compensation and offers2
Should a candidate disclose current compensation?
The useful figure is the one that would make a move worth making, rather than the historical one.
RED SKY agrees the band with the client during intake, before candidates enter the process. The conversation therefore starts from what the role pays, which removes most of the guesswork on both sides.
Who handles the offer negotiation?
RED SKY carries the offer conversation between both parties, and both parties see the same terms.
Base, bonus, equity, severance, and the indemnity and directors and officers coverage attached to the seat are all in scope. Security executives increasingly raise that last item first, and it belongs inside the process rather than after acceptance.
Role quality and survivability3
How can a candidate tell whether a security leadership role is survivable?
The signals are consistent: real budget authority, hiring authority, a reporting line with unfiltered access to the executive team, a documented risk appetite, and a board that asked hard questions before an incident forced the conversation.
A title without those attributes carries accountability without control. RED SKY raises the same questions with the client during intake, which is why they can be answered before an interview rather than after an offer.
Related Why RED SKY
Is the CISO role sustainable, or is burnout the pattern?
Burnout in that seat is usually structural. The mandate was underfunded and over-scoped before the leader arrived, and no amount of personal resilience corrects an authority gap.
A role scoped honestly at the start is a materially different job from one that was sold optimistically. The scoping questions are worth asking in the first conversation rather than the fourth.
Is a Chief AI Officer title a real mandate or a figurehead seat?
Both exist in the market right now. The real version owns a defined outcome, controls budget, and has a written boundary with technology, security, and data leadership. The figurehead version is announced first and negotiated indefinitely afterwards.
The boundary map is the fastest way to tell them apart, and RED SKY asks for it before an AI leadership search opens.
Related AI Talent and Strategy
Contract and interim work2
Is contract or interim work a step backward for a senior leader?
Senior contract and fractional engagements are scoped mandates with defined authority and a defined end date. A share of them convert to permanent seats, and many are chosen deliberately by leaders who prefer working across several environments.
What matters is whether scope, decision rights, and the exit are written down before day one. Where they are, interim work is a control that keeps a program moving during a search.
Related Precision Staffing Solutions
What does the process look like for contract and contract-to-hire roles?
Faster than executive search, and structured the same way. Scope, duration, rate, and extension terms are confirmed before a candidate is introduced.
Average submittal to hire runs [STAT: submittal_to_hire].
Related Open roles
Getting started2
How does a candidate get on RED SKY's radar?
Through the resume submission form, or through a direct conversation with a consultant covering the relevant practice.
Open roles are published as they are released. A significant share of executive mandates are confidential and never posted anywhere, which is why a conversation is more useful than watching a job board.
Related Submit a resume Open roles
Does RED SKY charge candidates?
No. Fees are paid by the hiring organization.
Candidates are never charged for placement, for coaching, or for access to roles.
Still unanswered
A question this page does not cover
Every message routes to a consultant who works the relevant practice. Confidential enquiries are handled as confidential from the first reply.
Hiring organizations
Open a conversation about a mandate
A first call covers scope, authority, budget, and timing. Where a role is not ready to go to market, that is said before a search opens rather than a quarter into one.
Candidates and executives
Start a confidential conversation
Nothing moves without approval, and no resume reaches an organization the leader has not agreed to. Confidential mandates are never posted anywhere.
Where each answer leads
The Triton Vetting ProcessIndustries servedInsights and market analysis
In Their Words
What it's like to work with RED SKY.
And what it's like to work here.
Feedback from enterprise security leaders, technology executives, and the people inside RED SKY.
RED SKY is in the company of very few in a crowded cybersecurity and IT industry. Truly flush with innovators and problem solvers, with one of the highest client-centric levels of care that I have ever witnessed. They truly listen, then take action and get results.
The process was streamlined. You understood our business needs, partnered with us, and you delivered top executive and non-executive level talent. I've worked with staffing firms all over North America; you've certainly demonstrated that you're a leader.
It was apparent he cared both about the company and the people whose position he was filling, all the time working hard to make sure the applicant has all the info to put their best foot forward. This is truly the way to place people in positions to succeed.
Everyone here is great. We work hard, but we laugh a lot and have fun. The money combined with the company culture is what will make me stay here for years to come.
Listened to our needs, was fair and ethical in our business dealings, and found us extremely qualified candidates. Personable, professional, and someone who gets the job done using creative approaches when traditional ways are not working.
I have had a great working relationship with RED SKY for many years. They take the time to understand my requirements and find people who meet my needs quickly. Always responsive. I would highly recommend them for your staffing needs.
A driven leader going beyond expectations in finding folks to meet project and staffing needs. Took the time to understand my needs and then leveraged the resources of RED SKY Consulting to assist and get fantastic results.
The ability to make great money, progress in your career, get training, and have work life balance is here. The people are fun, very friendly, and we work in a collaborative team environment. The culture and values are solid.
Always professional, responsive, and more importantly there with the solutions we need, when we need them. They've been a great asset for me in the last two companies I have worked for and I will undoubtedly lean on them in the future.
You know when you receive the candidate information, they will be the highest quality and best fit possible. I used them to find my security architect and could not have found a more perfect candidate.
RED SKY has a deep network of highly skilled individuals even in the tightest of markets. RED SKY does impeccably what I need a partner to do: solve problems.
All of us work harmoniously with each other, and you can be sure that help will come if you need it. Sometimes you don't even need to ask.
Hover to pause. Quotes are trimmed for length.
Read the full client record